cktricky d2bd77a461 the latest sqli tutorial leveraging @forced_request modifications. We really need some more unit-tests for all this new functionality

2014-04-17 22:07:58 -04:00

..

access_control

small update to A7

2013-11-14 11:24:15 -05:00

broken_auth_sess

updated tutorial to reflect changes to the correct code listed within the user model

2014-03-09 20:16:54 -04:00

constantize

this fixes issue #20, seriously, no clue how I missed the missing constantize code

2013-06-06 16:43:58 -04:00

credentials

changed motorcross to motocross everywhere that it used. Closes or resolves issue #104

2014-03-26 12:58:48 -04:00

csrf

fixed category number and this closes issue #35

2013-11-14 10:52:04 -05:00

exposure

added the verbose model attributes finding under the exposure section within the tutorials

2014-03-12 20:28:59 -04:00

injection

the latest sqli tutorial leveraging @forced_request modifications. We really need some more unit-tests for all this new functionality

2014-04-17 22:07:58 -04:00

insecure_components

updating the information for A9 fixes #27

2013-11-13 11:47:29 -05:00

insecure_dor

updated description with owasp one

2013-11-12 16:10:38 -05:00

logic_flaws

added the tutorial for the newest logic flaw

2014-03-16 22:10:19 -04:00

mass_assignment

this closes issue #9

2013-06-02 20:19:31 -04:00

misconfig

fixing two A5 typos

2013-11-14 11:26:31 -05:00

redirects

updating description with owasp 2013 description

2013-11-12 15:24:07 -05:00

ssl_tls

closes issue #7

2013-06-04 13:59:41 -04:00

url_access

finished admin filter and write-up for issue #6

2013-06-04 11:49:59 -04:00

xss

Fixes #99. We have added the hogan method for escaping user input and added a tutorial

2014-04-17 12:51:02 -04:00

_header.html.erb

trying to fix a bug where you have to click twice on the tutorial credentials button

2013-06-20 11:28:29 -04:00

_sidebar.html.erb

whew, now THAT is a huge tutorial explanation for a relatively simple issue!

2014-03-12 18:59:38 -04:00