3 ms·
I'm on a team that is writing documentation for developers to mitigate the OWASP Top 10 and CWE 25. You'd be surprised how many intelligent, bright developers t
by abyssknight 16y ago
I'm on a team that is writing documentation for developers to mitigate the OWASP Top 10 and CWE 25. You'd be surprised how many intelligent, bright developers think that because their code is behind the firewall it is safe and acceptable to leave those kinds of holes wide open.
- marcinw 16y agoAdd SSL to the list, along with hidden form parameters and request headers. It's as if nobody's ever heard of using cURL or an HTTP proxy, even if for debugging purposes.
- abyssknight 16y agoWe're actually covering code analysis, testing, and fuzzing tools as well. Great depth of information coming out of this thing. :)