Josh Grossman

Results 772 comments of Josh Grossman

This feels like big rework.

I think that the "third party library" part should stay as I think these are L3 requirement with specific and difficult scope. * 10.2.1 I think this is ok as...

Yeah this section has basically disappeared so closing this issue

I would suggest V7.1 - What to log and what not to log V7.2 - How to log V7.3 - How to protect logs

[8.3.5](https://appsecg.host/8.3) Also talks about logging so should probably be included in this... | # | Description | L1 | L2 | L3 | CWE | | :---: | :--- |...

Clearly major rework :)

Are we not leaving this for the rework stage?

The rework stage is when we deal with all the individual issues and start trying to rework entire chapters at a time

everything here is waiting for a draft now, right @elarlang ?

> Should we also have reference to "Logging Vocabulary Cheat Sheet"? There is a reference at the bottom of V7 (FYI @jmanico ) https://github.com/OWASP/ASVS/blob/master/5.0/en/0x15-V7-Error-Logging.md#references > Should we move 8.3.5 into...