Coding Dojo équipe @pcery
Ce Mardi 4 Mars 2014 avait lieu le Coding Dojo de mon équipe. Voici un petit résumé. Déroulement de la journée L’objectif principal de cette »
OWASP Top 10 - A10 Unvalidated Redirects and Forwards
Description If a user is redirected or forwarded to a page defined by an unverified entry, the target URL can be manipulated by an attacker. This »
OWASP Top 10 - A9 Using Components with Known Vulnerabilities
Description Known software vulnerabilities are available to everyone on the Internet. If an attacker knows which components you use, he can retrieve these vulnerabilities and find »
OWASP Top 10 - A8 Cross-Site Request Forgery (CSRF)
Description An attacker sends a request to a website you are authenticated on to execute an operation without your formal approval. Attackers usually use XSS [https: »
OWASP Top 10 - A7 Missing Function Level Access Control
Description In a web application with different user roles, authentication is not enough. Each request must be controlled against user’s role to ensure the user »