جولة في OWASP Top 10

في هذا الدرس

know the main risk categories and a backend example for each.

الموضوعات المخطط لها

• OWASP (a non-profit) publishes a Top 10 list of the most serious web application risks, updated every few years.
• Typical categories: broken access control, cryptographic failures, injection, insecure design, security misconfiguration, vulnerable components, authentication failures, integrity failures, logging and monitoring failures, SSRF. Names and order change by edition, so verify.
• Broken access control is at or near the top: for example an IDOR.
• OWASP also has an API Security Top 10 that fits our work well.
• Use the list as a checklist for code reviews.