05eb0a61_P_Top_Ten_Cheat_Sheet____OWASP__1
[0] A2 XSS [2] Canonicalize using correct character set Positive input validation using correct character set (NR) Negative input validation (LR) Sanitize input Tip: Only process data that is 100% trustworthy. Everything else is hostile and should be rejected. [3] Tip: Do not store data HTML encoded in the database. This prevents new uses for the data, such as web services, RSS feeds, FTP batches, data warehousing, cloud computing, and so on. Tip: Use OWASP Scrubbr to clean tainted or hostile data from legacy data [1] 
Avoid or prohibit hidden fields, custom headers or cookies Render Set correct content type Set safe character set (UTF-8) Set correct locale Output encode all user data as per output context Set input constraints On Submit Enforce input field type and lengths Validate fields and provide feedback Ensure option selects and radio contain only sent values
Difference between revisions of "OWASP Top Ten Cheat Sheet" - OWASP