Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sydseter/DevGuide
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: OWASP/DevGuide
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 17 commits
  • 26 files changed
  • 4 contributors

Commits on Jul 18, 2025

  1. Fixes OWASP#131 Top 10 proactivecontrols (OWASP#142)

    * Update and rename 01-define-security-requirements.md to 04-address-security-from-the-start.md
    
    * Update and rename 02-frameworks-libraries.md to 06-keep-your-components-secure.md
    
    * Update 06-digital-identity.md
    
    * Rename 04-address-security-from-the-start.md to 01-address-security-from-the-start.md
    
    * Rename 06-keep-your-components-secure.md to 02-keep-your-components-secure.md
    
    * Update 08-protect-data.md
    
    * Create 02-secure-by-default-configurations.md
    
    * Create 03-secure-by-default-configurations.md
    
    * Delete docs/en/04-design/02-web-app-checklist/02-secure-by-default-configurations.md
    
    * Update 03-secure-by-default-configurations.md
    
    * Move configuration requirements to secure by default configuration
    
    * correct linking
    
    * Update 02-keep-your-components-secure.md
    
    * Rename 03-secure-database-access.md to 04-secure-database-access.md
    
    * Rename 04-secure-database-access.md to 06-secure-database-access.md
    
    * Rename 06-digital-identity.md to 07-digital-identity.md
    
    * Rename 07-access-controls.md to 08-access-controls.md
    
    * Rename 08-protect-data.md to 09-protect-data.md
    
    * Rename 09-logging-monitoring.md to 10-logging-monitoring.md
    
    * Rename 10-handle-errors-exceptions.md to 11-handle-errors-exceptions.md
    
    * Add C10 from proactive controls
    
    * Update 04-encode-escape-data.md
    
    * Remove duplicate bullet point thart belongs to the encoding list
    
    * Update 01-address-security-from-the-start.md
    
    * Move bullet point from  01-address-security-from-the-start.md
    
    * Move bullet point to 08-access-controls.md
    
    * Remove bullet point that was meant for the access control list and that has become wrongly added to the authentication list
    
    * Update 09-protect-data.md
    
    * Add the practice
    
    * Move cryptographic practices to data protection
    
    * Change headers to conform to Top 10 Proactive Controls
    
    * Move data protection at rest bullet points under the appropriate header
    
    * Move file validation from address-security-from-the-start
    
    * Move authentication related issue to the authentication list.
    
    * Move from file management to secure by default
    
    * Move from address security from the start
    
    * move from secure from the start
    
    * No longer of interest as the new chapter now is called secure by default
    
    * Rename 03-secure-by-default-configurations.md to 01-secure-by-default-configurations.md
    
    * Update and rename 01-secure-by-default-configurations.md to 01-secure-by-default.md
    
    * Update and rename 04-encode-escape-data.md to 03-encode-escape-data.md
    
    * Rename 06-secure-database-access.md to 03-secure-database-access.md
    
    * Update and rename 03-encode-escape-data.md to 04-encode-escape-data.md
    
    * Rename 02-keep-your-components-secure.md to 02-frameworks-libraries.md
    
    * Add directions for editing
    
    * Fix link
    
    * Sort and create the file management header under secure by default
    
    * create header
    
    * Add JIT
    
    * Add cloud security
    
    * Add point about infra and policy as code.
    
    * Add point about infra as code
    
    * Add point from proactive controls
    
    * Move to validation
    
    * Move feom framework and libraryies
    
    * Add additional points about scanning for vulnerabilities
    
    * Shorten sentence
    
    * Move to access control
    
    * Move from digital identities
    
    * Add point related to session management
    
    * Move JIT to secure by default
    
    * Add jit
    
    * Add requirements for new accounts
    
    * Add JIT requirement
    
    * Separate the access control list into implementing and management
    
    * Add points from proactive controls
    
    * Add point about secret management
    
    * Add secret management list
    
    * Add point about logging
    
    * Add point about turning off older protocols
    
    * Add point about not serving http
    
    * Add point about the use of client side secure transmission features
    
    * Rename 07-digital-identity.md to 06-digital-identity.md
    
    * Rename 08-access-controls.md to 07-access-controls.md
    
    * Rename 09-protect-data.md to 08-protect-data.md
    
    * Rename 10-logging-monitoring.md to 09-logging-monitoring.md
    
    * Rename 11-handle-errors-exceptions.md to 10-handle-errors-exceptions.md
    
    * Fix linting
    
    * Fix linting
    
    * Fix ordering
    
    * Fix linting
    
    * Fix ordering
    
    * Update 02-frameworks-libraries.md
    
    * Fix linting
    
    * Fix linting
    
    * Fix linting
    
    * Fix ordering
    
    * Fix linting
    
    * Fix linting
    
    * Fix prdering
    
    * Fix spelling
    
    * Add words
    sydseter authored Jul 18, 2025
    Configuration menu
    Copy the full SHA
    b27130c View commit details
    Browse the repository at this point in the history
  2. OWASP#131 Fix the missing link (OWASP#144)

    * OWASP#131 Update mkdocs-pdf-en.yaml
    
    * OWASP#131 Update base mkdocs
    
    * OWASP#131 Update mkdocs-pdf-fa.yaml
    
    * OWASP#131 Update mkdocs-pdf-pt-br.yaml
    
    * OWASP#131 Recreate  01-define-security-requirements.md
    sydseter authored Jul 18, 2025
    Configuration menu
    Copy the full SHA
    ea04baf View commit details
    Browse the repository at this point in the history

Commits on Aug 1, 2025

  1. Configuration menu
    Copy the full SHA
    c18640f View commit details
    Browse the repository at this point in the history

Commits on Aug 4, 2025

  1. Missing requirement for sm3 moving session management to C7 about dig…

    …ital identities (OWASP#148)
    
    * Update 07-access-controls.md
    
    * Move session management to digital identity
    
    * Move session management requirements to digital identity
    
    * Fixes linting
    sydseter authored Aug 4, 2025
    Configuration menu
    Copy the full SHA
    783055d View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    4325073 View commit details
    Browse the repository at this point in the history

Commits on Aug 5, 2025

  1. Concurrent sessions (OWASP#150)

    * changes in requirements to align on concurrent sessions
    
    * move all session management items under session management
    
    * Remove item concerning concurrent sessions
    
    * Reorder items
    sydseter authored Aug 5, 2025
    Configuration menu
    Copy the full SHA
    10b0909 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    0cde6ca View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    d28c819 View commit details
    Browse the repository at this point in the history

Commits on Aug 7, 2025

  1. Adding SCP 115 (OWASP#153)

    * Adding 115 from SCP
    
    * ensure the line length isn't too long
    
    * Fix linting
    
    * Adding word to wordlist
    
    * Sort list
    
    * merge 6.1.12 and 6.1.21
    
    * split 9.2.10 into 9.2.10 and 9.2.11
    sydseter authored Aug 7, 2025
    Configuration menu
    Copy the full SHA
    bac40ee View commit details
    Browse the repository at this point in the history
  2. OWASP#90 Adding identifiers for each headline in the checklist (OWASP…

    …#154)
    
    * Adding identifieras for each headline in the checklist
    
    * Add missing words to the wordlist
    
    * Update 07-access-controls.md
    sydseter authored Aug 7, 2025
    Configuration menu
    Copy the full SHA
    9a3f157 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    bcb805a View commit details
    Browse the repository at this point in the history

Commits on Aug 26, 2025

  1. update workflow actions

    jgadsden committed Aug 26, 2025
    Configuration menu
    Copy the full SHA
    8110754 View commit details
    Browse the repository at this point in the history

Commits on Aug 27, 2025

  1. add OpenSSF badge

    jgadsden committed Aug 27, 2025
    Configuration menu
    Copy the full SHA
    96d6acc View commit details
    Browse the repository at this point in the history

Commits on Sep 23, 2025

  1. OWASP#158 Correcting page about OWASP Cornucopia (OWASP#159)

    * OWASP#158 Correcting page about OWASP Cornucopia
    
    * OWASP#158 Correct linting
    
    * OWASP#158 Correct linting and add words to wordlist
    
    * OWASP#158 Correct url
    sydseter authored Sep 23, 2025
    Configuration menu
    Copy the full SHA
    b38da66 View commit details
    Browse the repository at this point in the history

Commits on Oct 9, 2025

  1. Pytm description fix (OWASP#163)

    * pytm is a Python library
    
    * Fixing some details about pytm
    
    * Apparently I can't spell in 2 languages
    izar authored Oct 9, 2025
    Configuration menu
    Copy the full SHA
    d6c1e05 View commit details
    Browse the repository at this point in the history

Commits on Oct 13, 2025

  1. update actions in workflows

    jgadsden committed Oct 13, 2025
    Configuration menu
    Copy the full SHA
    526a9b6 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    323a6f6 View commit details
    Browse the repository at this point in the history
Loading