ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[S4502|S5131] Add resources and fix resources style (#4203)

Browse Source
This commit is contained in:
Loris S. 2024-08-30 12:01:23 +02:00 committed by GitHub
parent fc207d97df
commit 979c6d4b4a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rules/S4502/see.adoc
View File

@ -3,6 +3,7 @@
* OWASP - https://owasp.org/Top10/A01_2021-Broken_Access_Control/[Top 10 2021 Category A1 - Broken Access Control]
* CWE - https://cwe.mitre.org/data/definitions/352[CWE-352 - Cross-Site Request Forgery (CSRF)]
* OWASP - https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration[Top 10 2017 Category A6 - Security Misconfiguration]
* https://owasp.org/www-community/attacks/csrf[OWASP: Cross-Site Request Forgery]
* OWASP - https://owasp.org/www-community/attacks/csrf[Cross-Site Request Forgery]
* STIG Viewer - https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222603[Application Security and Development: V-222603] - The application must protect from Cross-Site Request Forgery (CSRF) vulnerabilities.
* PortSwigger - https://portswigger.net/research/web-storage-the-lesser-evil-for-session-tokens[Web storage: the lesser evil for session tokens]

7
rules/S5131/common/resources/articles.adoc
View File

@ -1,5 +1,6 @@
=== Articles & blog posts
* https://blog.sonarsource.com/wordpress-stored-xss-vulnerability[SonarSource, WordPress 5.8.2 Stored XSS Vulnerability]
* https://blog.sonarsource.com/ghost-admin-takeover[SonarSource, Ghost CMS 4.3.2 - Cross-Origin Admin Takeover]
* https://samy.pl/myspace/[Samy Kamkar, The MySpace Worm]
* SonarSource - https://blog.sonarsource.com/wordpress-stored-xss-vulnerability[WordPress 5.8.2 Stored XSS Vulnerability]
* SonarSource - https://blog.sonarsource.com/ghost-admin-takeover[Ghost CMS 4.3.2 - Cross-Origin Admin Takeover]
* Samy Kamkar - https://samy.pl/myspace/[The MySpace Worm]
* James Kettle, PortSwigger - https://portswigger.net/research/web-storage-the-lesser-evil-for-session-tokens[Web Storage: The Lesser Evil for Session Tokens]