This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Stinger Version 1"

From OWASP
Jump to: navigation, search
 
(Downloads)
 
(10 intermediate revisions by one other user not shown)
Line 1: Line 1:
 
==Overview==
 
==Overview==
  
The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient.
+
The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient. The basic idea is to define validation rules for the headers, cookies, and parameters of an HTTP request. These rules are specified in simple XML files using the 'Security Validation Definition Language.'
 
 
OWASP Stinger 2.x is an implementation of the design principals detailed in the [http://www.owasp.org/index.php/OWASP_Validation_Documentation_Project OWASP Validation Documentation]. The basic idea is to define validation rules for the cookies and parameters of an HTTP request. These rules are specified in simple XML files using the 'Security Validation Definition Language.'
 
  
 
==Project Lead==
 
==Project Lead==
  
The OWASP Stinger Project is lead by [mailto:eric.sheridan@owasp.org Eric Sheridan]
+
The OWASP Stinger Project leader is [mailto:Wesley.M.West@ge.com Wesley West].
  
 
==License==
 
==License==
Line 15: Line 13:
 
==Downloads==
 
==Downloads==
  
:*[http://www.owasp.org Click here] to download the latest version of the OWASP Stinger 2.x series
+
The 1.x version is no longer maintained or supported.
:*[http://www.owasp.org Click here] to view all OWASP Stinger 2.x releases
+
 
:*[http://www.owasp.org/index.php/OWASP_Stinger_Manual Click here] to view the OWASP Stinger Manual
+
:*[http://sourceforge.net/project/showfiles.php?group_id=64424&package_id=130521 Click here] to download the latest version of the OWASP Stinger 1.x series
 +
:*[http://www.owasp.org/index.php/How_to_Build_an_HTTP_Request_Validation_Engine_for_Your_J2EE_Application Click here] to read about the OWASP Stinger 1.0 implementation
  
 
==Feedback and Participation ==
 
==Feedback and Participation ==
Line 24: Line 23:
  
 
To join the OWASP Stinger mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-stinger subscription page].
 
To join the OWASP Stinger mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-stinger subscription page].
 +
 +
==Donations==
 +
 +
The Open Web Application Security Project is purely an open-source community driven effort. As such, all projects and research efforts are contributed and maintained with an individual's ''spare time.'' If you have found this or any other project useful, please support OWASP with a [https://www.owasp.org/index.php/Contributions donation].
  
 
==Project Sponsors==  
 
==Project Sponsors==  
Line 29: Line 32:
 
The OWASP Stinger project is sponsored by [http://www.aspectsecurity.com https://www.owasp.org/images/d/d1/Aspect_logo.gif].
 
The OWASP Stinger project is sponsored by [http://www.aspectsecurity.com https://www.owasp.org/images/d/d1/Aspect_logo.gif].
  
[[Category:OWASP Validation Project]]
+
[[Category:OWASP Stinger Project]]

Latest revision as of 18:44, 26 August 2008

Overview

The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient. The basic idea is to define validation rules for the headers, cookies, and parameters of an HTTP request. These rules are specified in simple XML files using the 'Security Validation Definition Language.'

Project Lead

The OWASP Stinger Project leader is Wesley West.

License

Stinger is offered under the LGPL. For further information on OWASP licenses, please consult the OWASP Licenses page.

Downloads

The 1.x version is no longer maintained or supported.

  • Click here to download the latest version of the OWASP Stinger 1.x series
  • Click here to read about the OWASP Stinger 1.0 implementation

Feedback and Participation

We hope you find Stinger useful. Please contribute back to the project by sending your comments, questions, and suggestions to the Stinger mailing list. Thanks!

To join the OWASP Stinger mailing list or view the archives, please visit the subscription page.

Donations

The Open Web Application Security Project is purely an open-source community driven effort. As such, all projects and research efforts are contributed and maintained with an individual's spare time. If you have found this or any other project useful, please support OWASP with a donation.

Project Sponsors

The OWASP Stinger project is sponsored by Aspect_logo.gif.