HNGlance

Top Best New Show

Clojure Web Security

https://lispcast.com/clojure-web-security/

by 0wl3x • 8 years ago

2 1 8 years ago

LI

Related Stories

Loading related stories...

Comments

1

markc• 8 years ago

This post is a reasonable start, but has some errors and omissions - and is now out of date since the OWASP Top 10 update.

A few suggested improvements:

Update to use OWASP Top 10 2017 https://www.owasp.org/index.php/Top_10-2017_Top_10

Incorporate OWASP Top 10 Proactive controls https://www.owasp.org/index.php/OWASP_Proactive_Controls

XSS Section refers only to stored XSS. Describe reflected XSS as well. Describe DOM-based XSS and mitigations.

Provide some examples of Security Misconfiguration

Provide advice on how to keep software patched for security flaws

The post says "Use HTTPS if you can". HTTPS is not optional for web security.

Source preview

lispcast.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms