diff --git a/docs/the-top-10/c1-accesscontrol.md b/docs/the-top-10/c1-accesscontrol.md index 29b5ace..bdb9821 100644 --- a/docs/the-top-10/c1-accesscontrol.md +++ b/docs/the-top-10/c1-accesscontrol.md @@ -92,6 +92,7 @@ Attribute or feature-based access control checks of this nature are the starting - [OWASP Cheat Sheet: Authorization Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html) - [OWASP Cheat Sheet: Logging Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html) +- [OWASP Cheat Sheet: Insecure Direct Object Reference Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet.html) - [OWASP ASVS V4 Access Control](https://owasp.org/www-project-application-security-verification-standard/) - [OWASP Testing Guide: Authorization Testing](https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/05-Authorization_Testing/) - [OAuth2.0](https://oauth.net/2/) protocol for authorization diff --git a/docs/the-top-10/c3-validate-input-and-handle-exceptions.md b/docs/the-top-10/c3-validate-input-and-handle-exceptions.md index 6861fb8..cffb652 100644 --- a/docs/the-top-10/c3-validate-input-and-handle-exceptions.md +++ b/docs/the-top-10/c3-validate-input-and-handle-exceptions.md @@ -141,10 +141,10 @@ Regarding Input Validation: - [OWASP Cheat Sheet: Input Validation](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html) - [OWASP Testing Guide: Testing for Input Validation](https://www.owasp.org/index.php/Testing_for_Input_Validation) +- [OWASP Cheat Sheet Series: DOM based XSS Prevention](https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html) - [Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html) - [Injection Prevention Cheat Sheet in Java](https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_in_Java_Cheat_Sheet.html) - Hardening with CSP: [CSP with Google](https://csp.withgoogle.com/docs/index.html) -- Deploying CSP in Single Page Applications ## Tools diff --git a/docs/the-top-10/c4-secure-architecture.md b/docs/the-top-10/c4-secure-architecture.md index 8ada6ec..2483701 100644 --- a/docs/the-top-10/c4-secure-architecture.md +++ b/docs/the-top-10/c4-secure-architecture.md @@ -89,8 +89,10 @@ Implementation: - - -- -- +- [OWASP Cheat Sheet Series: Attack Surface Analysis](https://cheatsheetseries.owasp.org/cheatsheets/Attack_Surface_Analysis_Cheat_Sheet.html) +- [OWASP Cheat Sheet Series: Microservices-based Security Arch Doc](https://cheatsheetseries.owasp.org/cheatsheets/Microservices_based_Security_Arch_Doc_Cheat_Sheet.html) +- [OWASP Cheat Sheet: Secure Product Design](https://cheatsheetseries.owasp.org/cheatsheets/Secure_Product_Design_Cheat_Sheet.html) +- [OWASP Cheat Sheet: Threat Modeling](https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html) ## Tools diff --git a/docs/the-top-10/c8-leverage-browser-security-features.md b/docs/the-top-10/c8-leverage-browser-security-features.md index 738df25..96f1ac1 100644 --- a/docs/the-top-10/c8-leverage-browser-security-features.md +++ b/docs/the-top-10/c8-leverage-browser-security-features.md @@ -100,3 +100,7 @@ Implementing these browser defenses can help mitigate a range of vulnerabilities - [Fetch Metadata Request Headers](https://www.w3.org/TR/fetch-metadata/) - [Fetch Metadata Resource Isolation Policy](https://web.dev/articles/fetch-metadata) - [Caniuse.com](https://caniuse.com/) +- [OWASP Cheat Sheet Series: Clickjacking Defense](https://cheatsheetseries.owasp.org/cheatsheets/Clickjacking_Defense_Cheat_Sheet.html) +- [OWASP Cheat Sheet Series: Content Security Policy](https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html) +- [OWASP Cheat Sheet Series: CSRF Prevention](https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html) +- [OWASP Cheat Sheet Series: HTTP Security Response Headers Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html)