This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Category:OWASP Java Project"
m (→Tools Chain) |
m |
||
| Line 161: | Line 161: | ||
= Project Pages = | = Project Pages = | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
== Tools Chain == | == Tools Chain == | ||
| − | [[OWASP_SonarQube_Project|OWASP SonarQube Project]] | + | {| class="wikitable" |
| − | + | | [[OWASP_SonarQube_Project|OWASP SonarQube Project]] | |
| − | Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java, .NET, Ruby, Node.js, and Python projects are supported. | + | | Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java, .NET, Ruby, Node.js, and Python projects are supported. |
| − | + | | / | |
| − | [[OWASP_Dependency_Check|OWASP Dependency Check]] | + | |- |
| + | | [[OWASP_Dependency_Check|OWASP Dependency Check]] | ||
| + | | Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java, .NET, Ruby, Node.js, and Python projects are supported. | ||
| + | | / | ||
| + | |} | ||
<br/> | <br/> | ||
| Line 221: | Line 217: | ||
== Retired, Inactive or Outdated Projects == | == Retired, Inactive or Outdated Projects == | ||
| − | |||
{| class="wikitable" | {| class="wikitable" | ||
| − | + | | [[https://www.owasp.org/index.php/OWASP_ESAPI#tab=Downloads|OWASP ESAPI Project Java Implementation]] | |
| − | |||
| − | |||
| − | |||
| − | | | ||
| − | |||
| − | | OWASP ESAPI Project Java Implementation | ||
| The Java and Java EE implementation of ESAPI Project is outdated and integrates various security issues, according to the bug tracker. It is strongly recommended to not employ this library in production code anymore and use alternative OWASP libraries instead. It still is useful for learning purposes. | | The Java and Java EE implementation of ESAPI Project is outdated and integrates various security issues, according to the bug tracker. It is strongly recommended to not employ this library in production code anymore and use alternative OWASP libraries instead. It still is useful for learning purposes. | ||
| − | | | + | | [[https://owasp-esapi.atlassian.net/projects/ESAPILEG/issues/ESAPILEG-309?filter=allopenissues|Bug Tracker]] |
|} | |} | ||
| Line 279: | Line 268: | ||
Work load is not the only outcome when participating in open projects. You are getting a lot of things back: recognition, satisfaction, knowledge and contacts, sometime friends. | Work load is not the only outcome when participating in open projects. You are getting a lot of things back: recognition, satisfaction, knowledge and contacts, sometime friends. | ||
| − | Sounds cool? Then jump | + | Sounds cool? Then jump in... |
To get involved join the mailing list, follow this link: [http://lists.owasp.org/mailman/listinfo/java-project OWASP Java and JVM Mailing List] | To get involved join the mailing list, follow this link: [http://lists.owasp.org/mailman/listinfo/java-project OWASP Java and JVM Mailing List] | ||
Revision as of 10:32, 22 December 2015
- Main
- Project and OWASP Resources
- Project Pages
- Tasks and Roadmap
- Get involved
- Project Archives
- Project About
AboutThe OWASP Java™ and JVM Project is the clearing house for all information related to building secure web/distributed applications and services based on Java and JVM technologies. The focus of the project is on guidance for developers and architects using Java frameworks and JVM based technologies for web application development, on OWASP components that use Java and on participation in OWASP projects that use Java and JVM technologies. Moreover, we aim to provide security related guidance for system administrators managing Java and JVM based applications and tools. The project is not limited to Java. It aims to also address topics around the JVM in general. Community content is key to security information. The project depends on content from developers throughout the Java and JVM ecosystem. Purpose
LicensingOWASP Java™ Project is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one. Oracle® and Java™ are trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
What's Hot!See the "Tasks and Roadmap" tab for more information. Wiki Pages Review Operation - 2015/2016
|
TeamLead: Tasha CARL
MetaLast Update: 12/2015
Other Resources
Related Projects |
Classifications
| |||||||
Mailing List |
Twitter Feed
|
Code Repository |
Related Project Resources
Tools Chain
| OWASP SonarQube Project | Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java, .NET, Ruby, Node.js, and Python projects are supported. | / |
| OWASP Dependency Check | Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java, .NET, Ruby, Node.js, and Python projects are supported. | / |
Libraries
Documents
OWASP Secure Coding Practices - Quick Reference Guide
OWASP Vulnerable Web Applications Directory
Pages to be reviewed or under review
Retired, Inactive or Outdated Projects
| [ESAPI Project Java Implementation] | The Java and Java EE implementation of ESAPI Project is outdated and integrates various security issues, according to the bug tracker. It is strongly recommended to not employ this library in production code anymore and use alternative OWASP libraries instead. It still is useful for learning purposes. | [Tracker] |
Ongoing Operations
Wiki Pages Review Operation - 2015/2016
Upcoming Operations
None at the moment. Everything is ongoing. If you have ideas for new operations, documentations, documents, projects, please drop a line on the mailing list or in a mail to project team.
Archived Operations
None at the moment.
There are many ways of getting involved in an OWASP Documentation projects.
The first step would be to establish contact with the project leaders and/or the entire team. This can be done using a direct and private message, or by joining the public mailing list to say hello.
When it comes to participating in project activities, everything depends on the time you are willing and able to invest. It is however very important to not jump into too many things at the beginning, later having to back out or to let unfinished things behind you. It is much better to start with small tasks, increasing intensity and investment over time.
Please also be patient with expecting the "merge" of your work into the existing project pages and code. As everywhere in live, trust has to be built-up.
The Java and Project has currently multiple tasks open, which can be found on the adequate section of this page. Note all tasks require a wiki account. Please take something you are interested in and start participating. Work load is not the only outcome when participating in open projects. You are getting a lot of things back: recognition, satisfaction, knowledge and contacts, sometime friends.
Sounds cool? Then jump in...
To get involved join the mailing list, follow this link: OWASP Java and JVM Mailing List
The previous version of this JAVA Project home page is archived here: OWASP Java Project Archive (8.2010)
The category 'Java' should not be employed. Please use the category '[[Category:OWASP_Java_Project]]' instead.
| PROJECT INFO What does this OWASP project offer you? |
RELEASE(S) INFO What releases are available for this project? | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| |||||||||||||||||||||||||||||||||||||
IMPORTANT: all pages of these project are currently under review. A lot are outdated and are in the process of being removed or updated. The review effort is coordinated on this page: Wiki Pages Review Operation - 2015/2016.
Media in category "OWASP Java Project"
This category contains only the following file.
