Skip to content
This repository has been archived by the owner on Apr 9, 2024. It is now read-only.

Bring up to date with base. #1

Open
wants to merge 2,427 commits into
base: master
Choose a base branch
from
Open

Bring up to date with base. #1

wants to merge 2,427 commits into from

Conversation

bonds0097
Copy link

I want to bring this up to date with the base repo before I diverge like a mofo.

elarlang and others added 30 commits February 19, 2024 09:28
@elarlang
#1868 new V5 section - validation and sanitization architecture
4ad8423
@elarlang
#1590 - decode once and before input validation
62a4c87
@elarlang
#1553 - 5.1.6 (v4.0.3-1.5.3) to 5.6.2 - changed wording
7c1585f
@elarlang
#1484 - 5.3.11 (v4.0.3-1.5.4) to 5.6.3 - changed wording
f0593b5
@elarlang
tagging update, #1484, #1553
3dae3ba
@tghosth @elarlang
Add extra paragraph to intro
9ee0f05
@tghosth @elarlang
Add recommendation about using client-side validation to monitor for …
a473805 
…attempts to subvert controls
@tghosth @elarlang
Lint fix
0b8ccfc
@elarlang
https://github.com/OWASP/ASVS/issues/1484#issuecomment-1951347976
9de2f80
@tghosth
Add anti-crawler recommendation to resolve #1810 (#1872)
9010009
@Sjord @tghosth
Remove proactive controls from requirement text
34f6f29 
As agreed in #810

See also #847, #809
@elarlang
50.5.3 Wording improvement per #1873 (comment) (#1874)
d861eb9
@tghosth
Resolve #1876 by clarifying wording (#1879)
601d26e
@tghosth
Add suggestion for end to end tests to resolve #1782 as per @ImanSharaf…
e848b5c 
… (#1881)
@tghosth
Attempt to fix broken link
f102365
@tghosth @elarlang
remove incorrect reference to env variables as discussed in #1876
cc6e600
@elarlang
grammarly
f20563e
@tghosth
Drop to L2 to resolve #1885 (#1887)
1b6dbf3
@tghosth @elarlang
Update supporters
8a80a39
@elarlang @tghosth
#1878 - 5.1.3 focus to allow-list only and revise intro to section (#…
821edda 
…1884)

* #1878 - 5.1.3 focus to allow-list only

* Add clarifications to the explanatory text

* Reword intro to input validation

* Fix linting

---------

Co-authored-by: Josh Grossman <[email protected]>
@elarlang
checked the calendar, markdown fixes, full url's for generated documents
5c3388e
@elarlang
md fix, + linter test
b61e758
@elarlang
linter setup seems to be incorrect
12fa58b
@tghosth @elarlang
Reset v9 changes as they will be handled separately
45f6f28
@tghosth
Change required indent to 4 rather than 2 (#1896)
0d95e85
@tghosth
Update CONTRIBUTING.md (#1899)
fd498ab 
* Update CONTRIBUTING.md

* Tidy newlines
@elarlang
Resolve #1603 - modify 5.1.5 (open redirect) and split to 50.7.1 (war…
a88bea7 
…n user when navigating away) (#1898)

* #1603 - modify 5.1.5 (open redirect) and split to 50.7.1 (warn user when navigating away)

* linter-happy

---------

Co-authored-by: Elar Lang <[email protected]>
@tghosth
Remove 1.9.1 and 1.9.2 as duplicates to resolve #1443
ba9fb84
@tghosth
Remove 9.2.5 to resolve #1890
8ac550b
@tghosth
V9 rework
252e880
tghosth and others added 30 commits October 20, 2024 08:32
@tghosth @elarlang
Make 1.4.4 a recommendation to resolve #2147
6bb9eb5
@elarlang
14.2.1 - component up to date
13a376e
@elarlang
#2142 server-side component version info leakage
a925155 
+ tag fix for #2164
@elarlang
some formating
a8c24a2
@elarlang
#2110 - update for sender-contrained refresh tokens
7a98154
@elarlang
formating
123cbd5
@ryarmst @elarlang
Updated V1.3 Section Text to Resolve #2103
58d3d5f
@ryarmst @elarlang
Updated wording following #2161 comments
77f2105
@ryarmst @elarlang
Updated 3.3.2 to Resolve #2113
2d85ce3
@ryarmst @elarlang
Updated wording following comment in #2162
932d455
@ryarmst @elarlang
Updated 1.3.2 to resolve #2101
b60585d
@tghosth
Refocus chapter V10 to resolve #2173 (#2174)
2b2eea9 
* Rename V10

* Refocus chapter V10 to resolve #2173
@tghosth
#2165 - component inventory to coding documentation
b1fd108
@tghosth
Clarify and move 1.14.5 to V10 architecture to resolve #1531 (#2177)
2642a6d 
* Update 0x18-V10-Coding.md

* Completed the move

* Keep CWE
@tghosth
#1389 relocate ip requirement
f17cd99
@elarlang @tghosth
#1604 - documentation for file upload
9b36ff5
@elarlang @tghosth
tag correction for #1531 / #2177
9fc75eb
@tghosth
Consider 403 to be an alive link
8caec41
@elarlang
#2092 - general requirement for 'transaction-specific'
793586f
@elarlang
oauth and oidc references, related to #2036 and #2037
a34e8f8
@tghosth @elarlang
Wording tweal
b8e16bf
@elarlang
#2184 - token signature check
cf64f7c
@tghosth @elarlang
Small wording fix
d18e916
@tghosth @elarlang
Explicitly consider 200 to be alive as well 🤦‍♂️
3b34770
@tghosth
Upgrade Jit supporter level
b09bccd
@tghosth @elarlang
Move dependency confusion to v10
f3118a1
@elarlang
#2164 - move components-up-to-date to V10
8bb65ae
@elarlang
#2088 move dependency pieces to V10
872f7ef
@elarlang
cleanup out-of-scope texts
d4857f1
@elarlang
cleanup - too specific reference
a2fba68
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.