OWASP Top 10

Note

OWASP is considered to be the gold-standard in computer security information. OWASP maintains an extensive series of cheat sheets which cover all the OWASP Top 10 and more. Below, many of the more relevant cheat sheets have been summarized. To view all the cheat sheets, check out their Cheat Sheet Index.

• Authorization Cheat Sheet

• Access Control Basics

• Attack Surface Analysis

• Content Security Policy (CSP)

• Cross-Site Request Forgery (CSRF) Prevention

• Cross-Site Scripting (XSS) Prevention

• Cryptographic Storage

• Deserialization

• Docker/Kubernetes (k8s) Security

• Input Validation

• Key Management

• OS Command Injection Defense

• Query Parameterization Examples

• Server-Side Request Forgery Prevention

• SQL Injection Prevention

• Unvalidated Redirects and Forwards

• Web Service Security

• XML Security

Attribution

This section is derived from the owasp.org top 10 project Or see https://owasp.org/Top10/

Copyright 2021 - OWASP Top 10 team - This work is licensed under a Creative Commons Attribution 3.0 Unported License.

OWASP 10 top documentation license: Creative Commons Attribution-ShareAlike 4.0 International Public License