This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of ".NET Project Wishlist"
From OWASP
Bill Sempf (talk | contribs) |
Bill Sempf (talk | contribs) |
||
| Line 1: | Line 1: | ||
| − | + | = What articles, content or general feedback do you have for the OWASP .NET Project? = | |
| + | |||
Feel free to leave ideas here to improve this section of the OWASP site. We hope to incorporate your suggestions into the .NET Project. For more information on what we are doing now, please check out the [[OWASP .Net Project Roadmap]]. | Feel free to leave ideas here to improve this section of the OWASP site. We hope to incorporate your suggestions into the .NET Project. For more information on what we are doing now, please check out the [[OWASP .Net Project Roadmap]]. | ||
| Line 5: | Line 6: | ||
| − | + | ==Guidance== | |
* Using Rfc2898DeriveBytes for PBKDF2 | * Using Rfc2898DeriveBytes for PBKDF2 | ||
| Line 19: | Line 20: | ||
*Dependency Injection, IoC containers and Threat Modelling | *Dependency Injection, IoC containers and Threat Modelling | ||
| − | + | ==Components== | |
Some of these are in the ESAPI, and perhaps should be broken into smaller more manageable projects | Some of these are in the ESAPI, and perhaps should be broken into smaller more manageable projects | ||
Revision as of 02:52, 2 April 2014
What articles, content or general feedback do you have for the OWASP .NET Project?
Feel free to leave ideas here to improve this section of the OWASP site. We hope to incorporate your suggestions into the .NET Project. For more information on what we are doing now, please check out the OWASP .Net Project Roadmap.
Thank you for your contribution.
Guidance
- Using Rfc2898DeriveBytes for PBKDF2
- Windows Identity Foundation
- AntiXssEncoder
- DPAPI
- Exception Handling
- Anti CSRF Tokens
- Memory Management
- ClickOnce Deployment
- .NET Callbacks - Vulnerabilities and Remediation
- ASP.NET Request Validation
- Dependency Injection, IoC containers and Threat Modelling
Components
Some of these are in the ESAPI, and perhaps should be broken into smaller more manageable projects
- Validator
- Encoder
- HTTP Utilities
- HTML Sanitizer
