New posts in owasp

mod_security with OWASP CRS: Custom rule for whitelisting googlebot

owasp mod-security whitelist

dependency-check-maven - suppression not working

java maven owasp maven-dependency-check-plugin

CSRF (Cross-site request forgery) attack example and prevention in PHP

PHP $_SERVER['HTTP_HOST'] vs. $_SERVER['SERVER_NAME'], am I understanding the man pages correctly?

php apache security owasp

What is "X-Content-Type-Options=nosniff"?

html http-headers meta owasp penetration-testing

Why is it common to put CSRF prevention tokens in cookies?

http security cookies csrf owasp

CSRF, XSS and SQL Injection attack prevention in JSF

jsf xss sql-injection csrf owasp