Chapter 10. Mitigation of OWASP Top 10

In this chapter, we will cover:

• A1 – Preventing injection attacks

• A2 – Building a proper authentication and session management

• A3 – Preventing cross-site scripting

• A4 – Preventing Insecure Direct Object References

• A5 – Basic security configuration guide

• A6 – Protecting sensitive data

• A7 – Ensuring function level access control

• A8 – Preventing CSRF

• A9 – Where to look for known vulnerabilities on third-party components

• A10 – Redirect validation