Upgrade to Pro — share decks privately, control downloads, hide ads and more …

OWASP Top 10 Overview

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers.

OWASP Top 10 Overview

Avatar for evandentremont

evandentremont

December 17, 2020
Tweet

More Decks by evandentremont

Other Decks in Programming

Transcript

  1. • • • • • • • • • •

    • • • • • • • • • •
  2. • • • • • • • • • •

    • • • • • • • • • •
  3. <?php class file { public $file = “file.txt” public $data

    = “some text” function __destruct(){ file_put_contents($this->file, $this->data); } } O:3{:”file”:2:{s:4:”file”;s:12:”file.txt”;s:4:”data”;s:9:”some text”};}
  4. • – <script>X</script>, <!--X-->, <div X=”y”>, <X></X>, <style>X</style> • –

    <div attr=X>, <div attr=”X”>, <div attr=’X’> • – <script>alert(‘X’), data=’X’, <div onClick=”data=’X’” – selector { property:X;}, <span style=”property:X;”>