This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

OWASP Java Project WIPRO 1 2015

Revision as of 11:20, 14 February 2016 by Imifos (talk | contribs)

Jump to: navigation, search
OWASP Java Project Header.png

Wiki Pages Review Operation - 2015/2016

91 Pages in category "OWASP Java Pages" have to be reviewed. We use a Google Document where every person interested can let opinions, comments and suggestions. Even reviewing one single page is welcome.

Shared Google document used to comment and review:



  • Start: 12/2015
  • Last Update: 12/2015

Other Resources



Shared Google document used to write reviews:

Page Status Review Operations
Bytecode obfuscation Outdated, needs review.
Captchas in Java
Clickjacking Protection for Java EE
Command injection in Java
Comparing classes by name
Complejidad Y Longitud De Las Contraseñas
Content Security Policy
CORS OriginHeaderScrutiny
CORS RequestPreflighScrutiny
Cross-site Scripting (XSS)
Declarative Access Control in Java
Decompiling Java bytecode
Deserialization of untrusted data
Detect profiling phase into web application
Digital Signature Implementation in Java
Exception handling techniques
Failure to follow guideline/specification
Hacking Java Clients
Hashing Java UNDER REVIEW The current version is unmaintained. Mark Gordon volountered to review the information, and bring it to the State-Of-The-Art-2015. Thank you!
How to add validation logic to HttpServletRequest
How to encrypt a properties file
Implementacion De Firmas Digitales en Java
Improper Data Validation
Improper temp file opening
Information Leakage
Insecure Randomness
Insecure Transport
Insufficient Session-ID Length
Invoking untrusted mobile code
Inyección De Comandos En Java
J2EE Misconfiguration: Unsafe Bean Declaration
J2EE third party libraries insecurity
JAAS Timed Login Module
JAAS Tomcat Login Module
Java Project Article Wishlist
Java Security Frameworks
Java Security Resources
Java Server Faces
JSP errorPage
Leftover Debug Code
Log Forging
Member Field Race Condition
Missing Error Handling
Mobile Java Security
Null Dereference
Object Model Violation: Just One of equals() and hashCode() Defined
Often Misused: Authentication
Overly-Broad Catch Block
Overly-Broad Throws Declaration
OWASP CSRFGuard Project/es
OWASP Java Table of Contents
Parameter Validation Filter
Password length & complexity
Password Management: Hardcoded Password
Password Management: Weak Cryptography
Password Plaintext Storage
PDF Attack Filter for Java EE
Poor Logging Practice
Preventing LDAP Injection in Java
Preventing SQL Injection in Java
Process Control
Protecting code archives with digital signatures
Reflection attack in an auth protocol
Return Inside Finally Block
Securing tomcat
Servlet spec - web.xml
Session Fixation
Session Timeout
Signing jar files with jarsigner
State synchronization error
Struts Validation in an ActionForm
Struts Validation in validator.xml using an ActionForm
Struts XSLT Viewer
Traducción Español
Trust Boundary Violation
Trustworthy Java
Uncaught exception
Unchecked Return Value: Missing Check against Null
Unreleased Resource
Unsafe JNI
Unsafe Mobile Code
Unsafe Reflection
Using JCaptcha
Using the Java Cryptographic Extensions
Using the Java Secure Socket Extensions
XPATH Injection Java
OWASP's_ESAPI_Wiki_for_Java! Check Project Status The entire ESAPI For Java project needs a review. In progress on ML.

Shared Google document used to write reviews:

OWASP Java and JVM Project - Wiki Pages Review Operation 1 - 2015/2016

What does this OWASP project offer you?
What releases are available for this project?
what is this project?
Name: OWASP Java Project WIPRO 1 - 2015/2016
Purpose: N/A
License: N/A
who is working on this project?
Project Leader(s): N/A
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: N/A
Project Roadmap: Not Yet Created
Key Contacts
  • Contact the GPC to contribute to this project
  • Contact the GPC to review or sponsor this project
current release
Not Yet Published
last reviewed release
Not Yet Reviewed

other releases