This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Code Review Guide Table of Contents"
From OWASP
(→Java) |
(→Language specific best practice) |
||
Line 47: | Line 47: | ||
#[[String management]] | #[[String management]] | ||
#[[Secure access to file system items]] | #[[Secure access to file system items]] | ||
+ | |||
+ | ===RUBY=== | ||
==Automating Code Reviews== | ==Automating Code Reviews== |
Revision as of 18:49, 22 January 2007
Guide History
Methodology
Design review
Examples by Vulnerability
- Reviewing Code for Buffer Overruns and Overflows
- Reviewing Code for OS Injection
- Reviewing Code for SQL Injection
- Reviewing Code for Data Validation
- Reviewing code for XSS issues
- Reviewing Code for Error Handling
- Reviewing Code for Logging Issues
- Reviewing The Secure Code Environment
- Transaction Analysis
- Authorization
- Authentication
- Session Integrity
- Cross Site Request Forgery
- Cryptography
- Dangerous HTTP Methods
- Race Conditions