Web Application Security Guide

by Wikibooks contributors

Read here Read at Wikibooks

A book Wikibooks counts as complete, from its open-content textbook collection.

Description from Wikibooks.

Publisher
Wikibooks contributors
Subjects
Computer programming, Information security, Web development
Licence
CC BY-SA 4.0, as Wikibooks states it
Who can read
Tweens profiles and older, judged from its title and subjects

Contents

  1. Web Application Security Guide
  2. checklist
  3. printable version
  4. Miscellaneous points
  5. File inclusion and disclosure
  6. File upload vulnerabilities
  7. SQL injection
  8. Cross-site scripting (XSS)
  9. XML and internal data escaping
  10. XML, JSON and general API security
  11. (Un)trusted input
  12. Cross-site request forgery (CSRF)
  13. Clickjacking
  14. Insecure data transfer
  15. Session fixation
  16. Session stealing
  17. Truncation attacks, trimming attacks
  18. Password security
  19. Comparison issues
  20. PHP-specific issues
  21. Prefetching and Spiders
  22. Special files
  23. SSL, TLS and HTTPS basics
  24. Further reading
  25. Authors
  26. Introduction