OWASP
OWASP
ELI5 — The Vibe Check
OWASP (Open Web Application Security Project) is the internet's biggest security club. They publish free guides, tools, and a famous top-10 list of the most dangerous web vulnerabilities. If you're building anything that faces the internet, their Top 10 is your security homework.
Real Talk
OWASP (Open Web Application Security Project) is a nonprofit foundation that publishes security standards, guidelines, and tools. The OWASP Top 10 is an industry-standard awareness document for the most critical web application security risks, updated periodically.
When You'll Hear This
"Follow the OWASP guidelines for input validation." / "We use OWASP ZAP for automated security scanning."
Related Terms
CSRF (CSRF)
CSRF (Cross-Site Request Forgery) is when a bad website hijacks your logged-in session on a good website to do things you didn't ask for.
OWASP Top 10
The OWASP Top 10 is the security industry's greatest hits of web vulnerabilities — the 10 most common, dangerous ways apps get hacked.
SQL Injection
SQL injection is when a hacker types SQL code into a text field instead of normal text, and your stupid database runs it.
Vulnerability
A vulnerability is a weakness in your code or system that a bad guy could exploit. Like a broken lock on a door.
XSS (XSS)
XSS stands for Cross-Site Scripting. Hackers inject their own JavaScript into your site so when other users visit, the evil script runs in their browser.