Tag: ASVS 5.3
-
OWASP A2 – Cross-Site Scripting (XSS) with PHP Part 1
We are finally starting a new OWASP Top 10 security risk today. The next few weeks (or possibly month) will cover XSS prevention techniques in PHP. This is probably a little more glamorous/sexy than authentication and session management. Controls to protect an application against XSS are primarily represented in the OWASP ASVS sections 5 and…