-
Notifications
You must be signed in to change notification settings - Fork 0
Comparing changes
Open a pull request
base repository: sydseter/DevGuide
base: master
head repository: OWASP/DevGuide
compare: main
- 17 commits
- 26 files changed
- 4 contributors
Commits on Jul 18, 2025
-
Fixes OWASP#131 Top 10 proactivecontrols (OWASP#142)
* Update and rename 01-define-security-requirements.md to 04-address-security-from-the-start.md * Update and rename 02-frameworks-libraries.md to 06-keep-your-components-secure.md * Update 06-digital-identity.md * Rename 04-address-security-from-the-start.md to 01-address-security-from-the-start.md * Rename 06-keep-your-components-secure.md to 02-keep-your-components-secure.md * Update 08-protect-data.md * Create 02-secure-by-default-configurations.md * Create 03-secure-by-default-configurations.md * Delete docs/en/04-design/02-web-app-checklist/02-secure-by-default-configurations.md * Update 03-secure-by-default-configurations.md * Move configuration requirements to secure by default configuration * correct linking * Update 02-keep-your-components-secure.md * Rename 03-secure-database-access.md to 04-secure-database-access.md * Rename 04-secure-database-access.md to 06-secure-database-access.md * Rename 06-digital-identity.md to 07-digital-identity.md * Rename 07-access-controls.md to 08-access-controls.md * Rename 08-protect-data.md to 09-protect-data.md * Rename 09-logging-monitoring.md to 10-logging-monitoring.md * Rename 10-handle-errors-exceptions.md to 11-handle-errors-exceptions.md * Add C10 from proactive controls * Update 04-encode-escape-data.md * Remove duplicate bullet point thart belongs to the encoding list * Update 01-address-security-from-the-start.md * Move bullet point from 01-address-security-from-the-start.md * Move bullet point to 08-access-controls.md * Remove bullet point that was meant for the access control list and that has become wrongly added to the authentication list * Update 09-protect-data.md * Add the practice * Move cryptographic practices to data protection * Change headers to conform to Top 10 Proactive Controls * Move data protection at rest bullet points under the appropriate header * Move file validation from address-security-from-the-start * Move authentication related issue to the authentication list. * Move from file management to secure by default * Move from address security from the start * move from secure from the start * No longer of interest as the new chapter now is called secure by default * Rename 03-secure-by-default-configurations.md to 01-secure-by-default-configurations.md * Update and rename 01-secure-by-default-configurations.md to 01-secure-by-default.md * Update and rename 04-encode-escape-data.md to 03-encode-escape-data.md * Rename 06-secure-database-access.md to 03-secure-database-access.md * Update and rename 03-encode-escape-data.md to 04-encode-escape-data.md * Rename 02-keep-your-components-secure.md to 02-frameworks-libraries.md * Add directions for editing * Fix link * Sort and create the file management header under secure by default * create header * Add JIT * Add cloud security * Add point about infra and policy as code. * Add point about infra as code * Add point from proactive controls * Move to validation * Move feom framework and libraryies * Add additional points about scanning for vulnerabilities * Shorten sentence * Move to access control * Move from digital identities * Add point related to session management * Move JIT to secure by default * Add jit * Add requirements for new accounts * Add JIT requirement * Separate the access control list into implementing and management * Add points from proactive controls * Add point about secret management * Add secret management list * Add point about logging * Add point about turning off older protocols * Add point about not serving http * Add point about the use of client side secure transmission features * Rename 07-digital-identity.md to 06-digital-identity.md * Rename 08-access-controls.md to 07-access-controls.md * Rename 09-protect-data.md to 08-protect-data.md * Rename 10-logging-monitoring.md to 09-logging-monitoring.md * Rename 11-handle-errors-exceptions.md to 10-handle-errors-exceptions.md * Fix linting * Fix linting * Fix ordering * Fix linting * Fix ordering * Update 02-frameworks-libraries.md * Fix linting * Fix linting * Fix linting * Fix ordering * Fix linting * Fix linting * Fix prdering * Fix spelling * Add words
Configuration menu - View commit details
-
Copy full SHA for b27130c - Browse repository at this point
Copy the full SHA b27130cView commit details -
Configuration menu - View commit details
-
Copy full SHA for ea04baf - Browse repository at this point
Copy the full SHA ea04bafView commit details
Commits on Aug 1, 2025
-
Configuration menu - View commit details
-
Copy full SHA for c18640f - Browse repository at this point
Copy the full SHA c18640fView commit details
Commits on Aug 4, 2025
-
Missing requirement for sm3 moving session management to C7 about dig…
…ital identities (OWASP#148) * Update 07-access-controls.md * Move session management to digital identity * Move session management requirements to digital identity * Fixes linting
Configuration menu - View commit details
-
Copy full SHA for 783055d - Browse repository at this point
Copy the full SHA 783055dView commit details -
Configuration menu - View commit details
-
Copy full SHA for 4325073 - Browse repository at this point
Copy the full SHA 4325073View commit details
Commits on Aug 5, 2025
-
Concurrent sessions (OWASP#150)
* changes in requirements to align on concurrent sessions * move all session management items under session management * Remove item concerning concurrent sessions * Reorder items
Configuration menu - View commit details
-
Copy full SHA for 10b0909 - Browse repository at this point
Copy the full SHA 10b0909View commit details -
Configuration menu - View commit details
-
Copy full SHA for 0cde6ca - Browse repository at this point
Copy the full SHA 0cde6caView commit details -
Configuration menu - View commit details
-
Copy full SHA for d28c819 - Browse repository at this point
Copy the full SHA d28c819View commit details
Commits on Aug 7, 2025
-
* Adding 115 from SCP * ensure the line length isn't too long * Fix linting * Adding word to wordlist * Sort list * merge 6.1.12 and 6.1.21 * split 9.2.10 into 9.2.10 and 9.2.11
Configuration menu - View commit details
-
Copy full SHA for bac40ee - Browse repository at this point
Copy the full SHA bac40eeView commit details -
OWASP#90 Adding identifiers for each headline in the checklist (OWASP…
…#154) * Adding identifieras for each headline in the checklist * Add missing words to the wordlist * Update 07-access-controls.md
Configuration menu - View commit details
-
Copy full SHA for 9a3f157 - Browse repository at this point
Copy the full SHA 9a3f157View commit details -
Configuration menu - View commit details
-
Copy full SHA for bcb805a - Browse repository at this point
Copy the full SHA bcb805aView commit details
Commits on Aug 26, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 8110754 - Browse repository at this point
Copy the full SHA 8110754View commit details
Commits on Aug 27, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 96d6acc - Browse repository at this point
Copy the full SHA 96d6accView commit details
Commits on Sep 23, 2025
-
OWASP#158 Correcting page about OWASP Cornucopia (OWASP#159)
Configuration menu - View commit details
-
Copy full SHA for b38da66 - Browse repository at this point
Copy the full SHA b38da66View commit details
Commits on Oct 9, 2025
-
Pytm description fix (OWASP#163)
* pytm is a Python library * Fixing some details about pytm * Apparently I can't spell in 2 languages
Configuration menu - View commit details
-
Copy full SHA for d6c1e05 - Browse repository at this point
Copy the full SHA d6c1e05View commit details
Commits on Oct 13, 2025
-
Configuration menu - View commit details
-
Copy full SHA for 526a9b6 - Browse repository at this point
Copy the full SHA 526a9b6View commit details -
Configuration menu - View commit details
-
Copy full SHA for 323a6f6 - Browse repository at this point
Copy the full SHA 323a6f6View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff master...main