2 ms·
I wish there was a "web security checklist" where if you ticked all the boxes, you can be pretty sure you have the well-known holes covered. This is why web fr
by gkya 9y ago
I wish there was a "web security checklist" where if you ticked all the boxes, you can be pretty sure you have the well-known holes covered. This is why web frameworks are really useful, the decent ones get you way ahead in securing your application from the most common attacks. But if you self-bake, then you have to manage the entire complexity of the web platform.
- nicoburns 9y agoThis doesn't cover everything, but it's a pretty good starting point: https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication https://stackoverflow.com/questions/549/the-definitive-guide...
- deejaybog 9y agoOWASP top 10 is as close as it gets to a checklist: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje...
- npsimons 9y ago> I wish there was a "web security checklist" https://www.owasp.org/index.php/Main_Page https://www.owasp.org/index.php/Main_Page https://www.stigviewer.com/stig/database_security_requirements_guide/ https://www.stigviewer.com/stig/database_security_requiremen...