[Owasp-guide] some worksheet notes

Boberski, Michael [USA] boberski_michael at bah.com
Tue Apr 27 15:30:07 EDT 2010

Also, the file name should be something like "owasp-guide-0600-output-encoding-escaping-worksheet.doc", the name should not include "validation" in it. Again though I'll work on this. Please everyone try to guard against blind cut-pastes for things.


Mike B.

From: Boberski, Michael [USA]
Sent: Tuesday, April 27, 2010 3:26 PM
To: 'owasp-guide at lists.owasp.org'
Subject: some worksheet notes

FYI, I think we just need one output encoding/escaping worksheet, rather than five.

Also, note how the "Fill in this worksheet using..." and the "After filling in..." fields should reference the dev guide requirement number, not ASVS requirements, as demonstrated in the input validation worksheet. This applies to all worksheets.

I'll provide a consolidated version later today or tomorrow...


Mike B.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-guide/attachments/20100427/3e3179e4/attachment.html 

More information about the Owasp-guide mailing list