OWASP

The Open Web Application Security Project (OWASP) puts out a regular list of the top 10 most critical web application security risks with the hopes of raising awareness and helping organizations develop a culture of more secure code. With that in mind, let’s take a look at the top five: 1. Broken Access Control This means that restrictions on authenticated users are not properly enforced, leading to one user able to see other users’ files or modify other users data. 2. XML External Entities Fun to say, not fun when it happens. This occurs when older or badly configured XML processors evaluate external entity references within XMLRead More →