05eb0a61_P_Top_Ten_Cheat_Sheet____OWASP__1
[0] A8 Unvalidated Redirects and Forwards [2] Design the app without URL redirection parameters or Obtain direct redirection parameter from random indirect reference access map (LR) Positive validation of redirection parameter (NR) Java – Do not forward() requests as this prevents SSO access control mechanisms [3] Validate role is sufficient to create, read, update, or delete data [1] 
Design the app without URL redirection parameters or Render Use random indirect object references for redirection parameters
Difference between revisions of "OWASP Top Ten Cheat Sheet" - OWASP