4 ms·
I love OWASP. but everything they do has zero usability. At times it looks like a bunch of 7yr old trying to mimic a big corporation. This list is a huge exam
by gcb0 9y ago
I love OWASP. but everything they do has zero usability.
At times it looks like a bunch of 7yr old trying to mimic a big corporation.
This list is a huge example of it. Instead of a text, they have a repo, that generates a huge PDF, mentioned in a press release, with the release described verbosily in a wiki!
And I went trhu all those hops, and I still couldn't find a single link that points me to what "Injection" means.
- rst 9y agoIt's a generalization of SQLi, to cover situations where the queries (or commands, or whatever) built up by unguarded string concatenation are something other than SQL. (Though, oddly, the examples in the current draft seem to all be SQL based.)
- gcb0 9y agothanks. have an upvote. I was mostly interested in learning why they have such atrocious publications/content organization though... i write on that subject internally for my employer. if OWASP goal is to inform the public, and not look like a mega-corporation, they are doing things very wrong. Their press releases are less parseable than the worse our legal department can produce.