OWASP Annotated Application Security Verification Standard
latest
Browse by chapter:
1 Architecture, Design and Threat Modeling
2 Authentication
3 Session Management
4 Access Control
4.1 General Access Control Design
4.2 Operation Level Access Control
4.2.1 Sensitive data and APIs are protected against direct object attacks
4.2.2 A strong anti-CSRF mechanism is enforced
4.3 Other Access Control Considerations
5 Validation, Sanitization and Encoding
6 Stored Cryptography
7 Error Handling and Logging
8 Data Protection
9 Communications
10 Malicious Code
11 Business Logic
12 Files and Resources
13 API and Web Service
14 Configuration
OWASP Annotated Application Security Verification Standard
Docs
»
4 Access Control
»
4.2 Operation Level Access Control
4.2 Operation Level Access Control
ΒΆ
Browse by item:
4.2.1 Sensitive data and APIs are protected against direct object attacks
4.2.2 A strong anti-CSRF mechanism is enforced