Skip to main content
5 votes
Accepted

Is OWASP ESAPI still the recommended way to secure JSP pages

The OWASP ESAPI is no longer considered a flagship or even an active project. Kevin Wall, the project owner for the Java implementation, himself back in 2014 conceded that the project is dying and ...
Mark Burnett's user avatar
  • 2,840
1 vote
Accepted

How can API documentation helpful to exploit any application?

If you have an internal administration portal that only the Human Resources department has access to, and that portal is a web application that talks to its API, then the people working in HR would be ...
Luc's user avatar
  • 33.1k
1 vote

How can API documentation helpful to exploit any application?

This question is quite vague. A service's API documentation is for end-users to utilize its service, it has information such as how to retrieve data, send data, store data, access data, manipulate ...
mallocation's user avatar
  • 1,676
1 vote

Is OWASP ESAPI still the recommended way to secure JSP pages

Another blurb from Kevin Wall on Should I use ESAPI? If you are starting out on a new project or trying for the first time to secure an existing project, then before you consider ESAPI, you should ...
HTKLee's user avatar
  • 1,852

Only top scored, non community-wiki answers of a minimum length are eligible