OWASP / Top10

Official OWASP Top 10 Document Repository
Other
4.24k stars 824 forks source link

Comparison of 2003-2021 Releases #674

Open cmlh opened 2 years ago

cmlh commented 2 years ago

I have created the Word document showing the comparison of the OWASP Top Ten 2003, 2004, 2007, 2010, 2013, 2017 and 2021 releases.

https://github.com/OWASP/Top10/pull/450 documents the historical background of each Pull Request associated to the prior releases of the OWASP Top Ten.

~I have opened this a draft Pull Request as I am still seeking:~

~- QA of the draft.~ ~- Logo of each paid sponsor.~ ~- Changes from August 2021 and September 2021~

The Pull Request is not signed due to the reused of GitHub Desktop and also lacks nuances of the git CLI.

colecornford commented 2 years ago

Change the colour of 2017 CSRF from Green to Red. ^25 uses the same name as 2017 despite the category being renamed to "Vulnerable and Outdated Components" What does Yellow mean? ^22 A7 is now "Identification and Authentication Failures" not Access A11 Next Steps isn't included might be something to think of?

cmlh commented 2 years ago

TODO add @colecornford to the credits

What does Yellow mean?

Yellow represents a merge from 2017 into 2021 @colecornford

A11 Next Steps isn't included might be something to think of?

A11 is not listed on index.md at commit da1463a8999e512a5abfa52a709570d2cc9c5d4d or older releases prior to 2017 @colecornford