SQL Injection and XSS Top Web App Security List
SQL injection and cross-site scripting lead a list of the most worrisome Web application security risks as reported by the Open Web Application Security Project.
SQL injection and cross-site scripting lead a list of the most worrisome Web application security risks as reported by the Open Web Application Security Project.
The Open Web Application Security Project (OWASP) has long studied Web application security flaws. The last OWASP Top Ten list, published in 2007, was instrumental in educating developers about oft-exploited Web vulnerabilities, from cross-site scripting to unrestricted URL access. This April, the OWASP published an all new 2010 list, focused on putting today's most common flaws into a risk management context.
To assist the OWASP with this endeavor, we dedicate this month's eSecurityPlanet column to publicizing the Top Ten 2010 Web app risk list 'PDF'. By helping to spread the list far and wide, we hope to help make the World Wide Web a safer place for all.