This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
OWASP Code Review Guide Table of Contents
From OWASP
Methodology
Design review
Examples by Vulnerability
- Buffer Overruns and Overflows
- OS Injection
- SQL Injection
- Data Validation
- Error Handling
- The Secure Code Environment
- Transaction Analysis
- Authorization
- Authentication
- Session Integrity
- Cross Site Request Forgery Attacks
- Cryptography
Language specific best practice
Java
- Inner classes
- Class comparison
- Cloneable classes
- Serializable classes
- Package scope and encapsulation
- Mutable objects
- Private methods & circumvention