@@ -67,7 +67,7 @@ The items marked "PLANNED-1" are those we intend to do first;
67
67
* Using Regular Expressions for Text Input Validation - [ regex1] ( regex1.html ) , [ input2] ( input2.html )
68
68
* Countering ReDoS Attacks on Regular Expressions - PLANNED-2
69
69
* Input Validation: Beyond Numbers and Text
70
- * Insecure Deserialization - PLANNED-2
70
+ * Insecure Deserialization - PLANNED-2 (Tepas Jena)
71
71
* Input Data Structures (XML, HTML, CSV, JSON, & File Uploads) - PLANNED-2
72
72
* Minimizing Attack Surface, Identification, Authentication, and Authorization - PLANNED-2
73
73
* Search Paths and Environment Variables (including setuid/setgid Programs) - PLANNED-2
@@ -77,7 +77,7 @@ The items marked "PLANNED-1" are those we intend to do first;
77
77
* Processing Data Securely
78
78
* Processing Data Securely: General Issues
79
79
* Prefer Trusted Data. Treat Untrusted Data as Dangerous - PLANNED-2
80
- * Avoid Default & Hardcoded Credentials - PLANNED-1
80
+ * Avoid Default & Hardcoded Credentials - PLANNED-1 (Tepas Jena)
81
81
* Avoid Incorrect Conversion or Cast - PLANNED-2
82
82
* Processing Data Securely: Undefined Behavior / Memory Safety
83
83
* Countering Out-of-Bounds Reads and Writes (Buffer Overflow) - [ oob1] ( oob1.html )
@@ -89,8 +89,8 @@ The items marked "PLANNED-1" are those we intend to do first;
89
89
* Introduction to Securely Calling Programs
90
90
* Introduction to Securely Calling Programs - The Basics
91
91
* Calling Other Programs: Injection and Filenames
92
- * SQL Injection - PLANNED-1
93
- * OS Command (Shell) injection - ( PLANNED-1, Marta Rybczynska)
92
+ * SQL Injection - PLANNED-1 (Tepas Jena)
93
+ * OS Command (Shell) injection - PLANNED-1 ( Marta Rybczynska)
94
94
* Other Injection Attacks - PLANNED-2
95
95
* Filenames (Including Path Traversal and Link Following) - PLANNED-2
96
96
* Calling Other Programs: Other Issues
@@ -101,7 +101,7 @@ The items marked "PLANNED-1" are those we intend to do first;
101
101
* Countering Denial-of-Service (DoS) Attacks - PLANNED-2
102
102
* Sending Output
103
103
* Introduction to Sending Output - PLANNED-2
104
- * Countering Cross-Site Scripting (XSS) - PLANNED-1
104
+ * Countering Cross-Site Scripting (XSS) - PLANNED-1 (Tepas Jena)
105
105
* Content Security Policy (CSP) - [ csp1] ( csp1.html )
106
106
* Other HTTP Hardening Headers - (probably continue csp1) PLANNED-2
107
107
* Cookies & Login Sessions - PLANNED-2
0 commit comments