CHAPTER 4
Web Application Vulnerabilities and Countermeasures
Chapter 3 identified many commonly found vulnerabilities in my real experience as an auditor. This chapter explains how to remediate each vulnerability. For both chapters, the vulnerabilities and their remediations are grouped into classes or variations on a theme of susceptibility. The classes are:
- authentication
- session management
- access control
- input validation
- redirects and forwards
- injection flaws
- unauthorized view of data
- error handling
- cross-site scripting
- security misconfigurations
- denial of service
- related security issues
For brevity and clarity, in this chapter the recommendations ...
Get The Manager’s Guide to Web Application Security: A Concise Guide to the Weaker Side of the Web now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
