-
Updated
Mar 21, 2022 - Python
owasp
Here are 473 public repositories matching this topic...
-
Updated
Mar 20, 2022
-
Updated
Mar 21, 2022 - JavaScript
-
Updated
Mar 21, 2022 - Go
-
Updated
Mar 21, 2022 - TypeScript
-
Updated
Nov 1, 2021 - PHP
Onekongpc
What and where?
Please give the broken URL. Where is the link located?
Would you like to be assigned to this issue?
Check the box if you will submit a PR to fix this issue. Please read CONTRIBUTING.md.
-KONG [ ] Assign me, please!
-
Updated
Feb 5, 2022 - Ruby
-
Updated
Feb 7, 2022 - Go
Slack us first!
Hello. I write about problem here:
https://owasp.slack.com/archives/C2P5BA8MN/p1624892081234100
Be informative
As additional into slack I find the same behaviour with Risk Accepted findings. Into Metrics I see 0 Risk Accepted findings, but I have 1 Risk Accepted finding
Bug description
No error. Metrics into product, or metrics dushboard has incorrect info
-
Updated
Jan 29, 2022 - Python
-
Updated
Mar 21, 2022 - JavaScript
-
Updated
Feb 14, 2022 - HTML
Description
BeanUtils is a library that is doing automatic mapping to Java object.
It can cause arm when the attack controls part of the list of properties being sets. BeanUtils does not blacklist properties like class, classloader or other objects that are likely to load arbitrary classes and possibly run code.
Code
import org.apache.commons.beanutils.BeanUtils;
public-
Updated
Mar 18, 2022 - HTML
-
Updated
Mar 21, 2022 - JavaScript
-
Updated
Mar 18, 2022 - C
-
Updated
Mar 10, 2022 - TeX
-
Updated
Dec 1, 2021
The current swagger definition is autogenerated. The automatically generated definitions rely on reflection and annotations to create the documentation. The reflection capabilities are poor at best and lead to missing API parameters. Annotations can help in some cases, but the only fix for Swagger is to create individual POJOs for every possible request. This will lead to unnecessary large number
-
Updated
Jul 11, 2019
-
Updated
Mar 19, 2022 - Raku
-
Updated
Mar 3, 2022 - PHP
-
Updated
Jan 26, 2022 - Go
I just finished dealing with auto-migrated issues for this article, it could definitely use some content updates:
https://github.com/OWASP/www-community/blob/master/pages/HttpOnly.md it still talks about old versions of IE and Opera.
This article includes an extensive table that needs re-working after the auto-migration as well (which I did not tackle).
Is Opera even relevant in 2020? Do
sim swapping
OSCA22
Mar 24 - 28, 2022 • Online
Improve this page
Add a description, image, and links to the owasp topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the owasp topic, visit your repo's landing page and select "manage topics."


Describe the bug
When you change the Policy Name more than two Time(e.g. from upper Case to Lower-Case) then the item got duplicated, after removing one item the other cannot be modified anymore but removed.
Steps to reproduce the behavior