security-guide-for-developers

security-guide-for-developers copied to clipboard

rookiemonkey

update a few things. add a few things. change indent to 4 spaces because github's list parser is flaky with two space, even though markdown permits it and good taste...

StoneCypher

LOkn7630

frame-ancestors is in CSP1.1 standard. "The frame-ancestors directive obsoletes the X-Frame-Options header" (https://www.w3.org/TR/CSP2/#frame-ancestors-and-frame-options)

balamaci

prevent username enumeration

1

cottsak

germanvillarreal

halilim

Spground

Links to OWASP checklists Links to CTFs / websec war games -- think like a hacker to beat hackers Mentioning of WAF and IDS Mentioning automated auditing tools (static analysis,...

chadfurman

https://github.com/IamHDT/Ecommerce-Website-Security-CheckList List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or...

IamHDT