榜单
服务器优惠
AI论文
-
6.4. Prevent query injection vulnerabilities with ORM/ODM libraries
Preventing database injection vulnerabilities by using ORM/ODM libraries or other DAL packages One Paragraph Explainer Libraries Example - NoSQL query injection Example - SQL in... -
Protect and Perform Penetration Testing of Web Services
Protect and Pen Test Web Services Details Remediation References CWE/OWASP Protect and Pen Test Web Services Details A compromised server has the potential to intercept u... -
7.7 避免 Intent 嗅探
避免 Intent 嗅探 详细描述 建议 CWE/OWASP 避免 Intent 嗅探 当activity由另一个使用广播Intent的应用程序启动时，Intent中传递的数据可以由恶意应用程序读取。 详细描述 当另一个应用程序通过发送广播Intent启动activity时，恶意应用程序可以读取Intent中包含的数据。 恶意应用程序还可... -
7.12 签名 Android APKs
签名 Android APKs 详细描述 建议 参考 CWE/OWASP 签名 Android APKs 详细描述 APK应使用未过期的证书正确签名。 建议 使用生产证书（而不是调试证书）签署生产应用程序 确保证书包含足够的有效期（即，不会在应用的预期有效期内过期） Google建议您的证书至少使用2048位加密 确保包含签名密钥... -
Use SECURE Setting For Cookies
Use SECURE Setting For Cookies Details Remediation CWE/OWASP Use SECURE Setting For Cookies Details If a cookie is not marked as “Secure,” it may be transmitted over an in... -
Avoid Storing App Data in Backups
Avoid Storing App Data in Backups Details Remediation Android iOS CWE/OWASP Avoid Storing App Data in Backups Details Performing a backup of the data on an Android or iO... -
Implement PendingIntents Carefully
Implement PendingIntents Carefully Details Remediation References CWE/OWASP Implement PendingIntents Carefully A PendingIntent allows an app to pass an Intent to a second a... -
Avoid Caching HTTP(S) Requests/Responses
Avoid Caching HTTP(S) Requests/Responses Details Remediation References CWE/OWASP Avoid Caching HTTP(S) Requests/Responses Details By default, iOS’s NSURLRequest will ca... -
开启 WAF 防护的最佳实践
开启 WAF 防护的最佳实践 相关知识介绍 ModSecurity 安全规则语言 OWASP核心规则集 WAF插件防护原理 使用示例 部署服务并创建ingress 安装WAF插件 请求拦截示例 自定义规则防护测试 细粒度（路由级/域名级）防护测试 常见攻击防护测试 整体防护能力评估 开启 WAF 防护的最佳实践 网关在系统架构... -
Install Jenkins with DevStream
Install Jenkins with DevStream Default Configs Outputs Install Jenkins with DevStream //TODO(daniel-hutao): to be updated This plugin installs Jenkins in an existing Kube...