OWASP / wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
https://owasp.org/www-project-web-security-testing-guide/
Creative Commons Attribution Share Alike 4.0 International
7.26k stars 1.32k forks source link

Add Testing for Web Cache Deception Attack #1009

Closed cyspad closed 1 year ago

cyspad commented 1 year ago

Add Testing for Web Cache Deception

Closes #1008

github-actions[bot] commented 1 year ago

The following issues were identified: document/4-Web_Application_Security_Testing/01-Information_Gathering/08-Fingerprint_Web_Application_Framework.md:44:393 MD051/link-fragments Link fragments should be valid [Context: "Remediation"] document/4-Web_Application_Security_Testing/01-Information_Gathering/08-Fingerprint_Web_Application_Framework.md:83:152 MD051/link-fragments Link fragments should be valid [Context: "Cookies"] document/4-Web_Application_Security_Testing/06-Session_Management_Testing/03-Testing_for_Session_Fixation.md:26:63 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] document/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.3-Testing_for_SQL_Server.md:212:56 MD051/link-fragments Link fragments should be valid [Context: "Sample 4 above"] document/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets.md:39:56 MD051/link-fragments Link fragments should be valid [Context: "Tools"] document/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets.md:59:51 MD051/link-fragments Link fragments should be valid [Context: "Tools"] document/4-Web_Application_Security_Testing/12-API_Testing/01-Testing_GraphQL.md:389:17 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:122:61 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:122:68 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:122:273 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:183:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:185:42 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:185:119 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:185:164 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:196:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:200:30 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:200:46 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:204:45 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:204:61 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:208:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:208:18 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:208:30 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:212:15 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:212:28 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:212:45 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:216:32 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:216:45 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:216:62 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:220:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:220:12 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:224:18 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:224:102 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:228:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:232:18 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:232:78 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:236:34 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:238:91 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:240:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:250:6 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:252:79 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:254:18 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore] style_guide.md:254:103 MD049/emphasis-style Emphasis style should be consistent [Expected: asterisk; Actual: underscore]

github-actions[bot] commented 1 year ago

The following links are broken: FILE:document/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/03-Test_File_Extensions_Handling_for_Sensitive_Information.md [✖] https://filext.com/ → Status: 403

github-actions[bot] commented 1 year ago

The following mistakes were identified:

/home/runner/work/wstg/wstg/document/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/04-Review_Old_Backup_and_Unreferenced_Files_for_Sensitive_Information.md 111:94 ✖ Incorrect usage of the term: “html”, use “HTML” instead terminology

/home/runner/work/wstg/wstg/document/4-Web_Application_Security_Testing/07-Input_Validation_Testing/01-Testing_for_Reflected_Cross_Site_Scripting.md 168:21 ✖ Incorrect usage of the term: “white space”, use “whitespace” instead terminology

/home/runner/work/wstg/wstg/document/4-Web_Application_Security_Testing/08-Testing_for_Error_Handling/01-Testing_For_Improper_Error_Handling.md 60:356 ✖ Incorrect usage of the term: “file names”, use “filenames” instead terminology

/home/runner/work/wstg/wstg/document/4-Web_Application_Security_Testing/11-Client-side_Testing/09-Testing_for_Clickjacking.md 302:68 ✖ Incorrect usage of the term: “ok”, use “OK” instead terminology

kingthorin commented 1 year ago

?

kingthorin commented 1 year ago

I'm not really sure why you've PRd Thunderson's content. I'd suggest referring to the contributing guide: https://github.com/OWASP/wstg/blob/master/CONTRIBUTING.md