@@ -67,7 +67,7 @@ The items marked "PLANNED-1" are those we intend to do first;
6767 * Using Regular Expressions for Text Input Validation - [ regex1] ( regex1.html ) , [ input2] ( input2.html )
6868 * Countering ReDoS Attacks on Regular Expressions - PLANNED-2
6969 * Input Validation: Beyond Numbers and Text
70- * Insecure Deserialization - PLANNED-2
70+ * Insecure Deserialization - PLANNED-2 (Tepas Jena)
7171 * Input Data Structures (XML, HTML, CSV, JSON, & File Uploads) - PLANNED-2
7272 * Minimizing Attack Surface, Identification, Authentication, and Authorization - PLANNED-2
7373 * Search Paths and Environment Variables (including setuid/setgid Programs) - PLANNED-2
@@ -77,7 +77,7 @@ The items marked "PLANNED-1" are those we intend to do first;
7777* Processing Data Securely
7878 * Processing Data Securely: General Issues
7979 * Prefer Trusted Data. Treat Untrusted Data as Dangerous - PLANNED-2
80- * Avoid Default & Hardcoded Credentials - PLANNED-1
80+ * Avoid Default & Hardcoded Credentials - PLANNED-1 (Tepas Jena)
8181 * Avoid Incorrect Conversion or Cast - PLANNED-2
8282 * Processing Data Securely: Undefined Behavior / Memory Safety
8383 * Countering Out-of-Bounds Reads and Writes (Buffer Overflow) - [ oob1] ( oob1.html )
@@ -89,8 +89,8 @@ The items marked "PLANNED-1" are those we intend to do first;
8989 * Introduction to Securely Calling Programs
9090 * Introduction to Securely Calling Programs - The Basics
9191 * Calling Other Programs: Injection and Filenames
92- * SQL Injection - PLANNED-1
93- * OS Command (Shell) injection - ( PLANNED-1, Marta Rybczynska)
92+ * SQL Injection - PLANNED-1 (Tepas Jena)
93+ * OS Command (Shell) injection - PLANNED-1 ( Marta Rybczynska)
9494 * Other Injection Attacks - PLANNED-2
9595 * Filenames (Including Path Traversal and Link Following) - PLANNED-2
9696 * Calling Other Programs: Other Issues
@@ -101,7 +101,7 @@ The items marked "PLANNED-1" are those we intend to do first;
101101 * Countering Denial-of-Service (DoS) Attacks - PLANNED-2
102102* Sending Output
103103 * Introduction to Sending Output - PLANNED-2
104- * Countering Cross-Site Scripting (XSS) - PLANNED-1
104+ * Countering Cross-Site Scripting (XSS) - PLANNED-1 (Tepas Jena)
105105 * Content Security Policy (CSP) - [ csp1] ( csp1.html )
106106 * Other HTTP Hardening Headers - (probably continue csp1) PLANNED-2
107107 * Cookies & Login Sessions - PLANNED-2
0 commit comments