This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Code Review Guide Table of Contents"
From OWASP
(Title case: "Cryptographic contols" -> "Cryptographic Contols". Changed link to an article name reflecting the name used here) |
(Title case: "Reviewing Code for Cross-site scripting" -> "Reviewing Code for Cross-Site Scripting", also relinking to an article reflecting the new name.) |
||
| Line 44: | Line 44: | ||
* [[Reviewing Code for SQL Injection]] | * [[Reviewing Code for SQL Injection]] | ||
* [[Reviewing Code for Data Validation]] | * [[Reviewing Code for Data Validation]] | ||
| − | * [[Reviewing Code for Cross- | + | * [[Reviewing Code for Cross-Site Scripting]] |
* [[Reviewing code for Cross-Site Request Forgery issues]] | * [[Reviewing code for Cross-Site Request Forgery issues]] | ||
* [[Reviewing Code for Logging Issues]] | * [[Reviewing Code for Logging Issues]] | ||
Revision as of 15:45, 7 September 2010
Foreword by OWASP Chair
Frontispiece
Guide History
Methodology
- Introduction
- Preparation
- Security Code Review in the SDLC
- Security Code Review Coverage
- Application Threat Modeling
- Code Review Metrics
Crawling Code
- Crawling Code
- Searching for Code in J2EE/Java
- Searching for Code in Classic ASP
- JavaScript/Web 2.0 Keywords and Pointers
Code Reviews and PCI DSS
Examples by technical control
- Authentication
- Authorization
- Session Management
- Input Validation
- Error Handling
- Secure Deployment
- Cryptographic Controls
Examples by vulnerability
- Reviewing Code for Buffer Overruns and Overflows
- Reviewing Code for OS Injection
- Reviewing Code for SQL Injection
- Reviewing Code for Data Validation
- Reviewing Code for Cross-Site Scripting
- Reviewing code for Cross-Site Request Forgery issues
- Reviewing Code for Logging Issues
- Reviewing Code for Session Integrity issues
- Reviewing Code for Race Conditions
