New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Risk profile of Frameworks #256 #288

Open

Ambg05 opened this issue Dec 14, 2016 · 0 comments

Labels

Collaborator

Ambg05 commented Dec 14, 2016

From content/2.Risk-workflow/For-developers/Risk-profile-of-framewo… … #256

Add case-studies on issues created by 'normal' framework usage:
- SpringMVC Auto-Binding (also called over-posting)
- Razor controls vulnerable to XSS on un-expected locations (like label)
- Ember SafeHtml
- OpenAM SQL Query Injection on code sample (and see in live app)
- Android query SQL Injection (on some parameters)

Ambg05 added the content-fixes label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment