Web Security for Developers

INDEX

Page numbers followed by an italicized f or t refer to figures and tables respectively.

Symbols and Numbers

: (colon character), 82

/ (path separator character), 109

; (semicolon character), 52

' (single quote character), 51–53

10 Minute Mail, 86

401 status code (in HTTP), 82

A

Accept header, 10–11

access control, 25, 166

aspects of, 104

audit trails, 107–108

common oversights, 108

defined, 104

implementing, 106–107

models for

access control lists, 105

ownership-based access control, 106

role-based access control, 105–106

whitelists and blacklists, 105

testing, 107

access control lists (ACLs), 105

access tokens, 139

Acid3 test, 18, 18f

Active Directory, 137

ActiveRecord framework, 54–55

ActiveX, xxi

administrative frontends, securing, ...