OWASP Stinger Version 1
The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient. The basic idea is to define validation rules for the headers, cookies, and parameters of an HTTP request. These rules are specified in simple XML files using the 'Security Validation Definition Language.'
The OWASP Stinger Project is lead by Eric Sheridan
- Click here to download the latest version of the OWASP Stinger 1.x series
Feedback and Participation
We hope you find Stinger useful. Please contribute back to the project by sending your comments, questions, and suggestions to the Stinger mailing list. Thanks!
To join the OWASP Stinger mailing list or view the archives, please visit the subscription page.