Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 214489

For questions about the top ten list itself, such as categorization or inclusion criteria. Do not use just because the vulnerability you are asking about is on the list.

0 votes
1 answer
141 views

Does A6 - Security Misconfiguration be reported for embedded JS? [duplicate]

We have a HTML file with a minified JSlibrary pasted inside with the license header and version number. Our client reported that it's a security risk (https://www.owasp.org/index.php/Top_10-2017_A6-S …
stormtrooper's user avatar
39 votes
5 answers
14k views

Is it really Security Misconfiguration to show a version number?

Our web application uses a HTML file with jQuery embedded inside. According to the jQuery license (https://jquery.org/license/), we have to leave the license header intact, including the version numbe …
stormtrooper's user avatar