Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create 2023-10-23-Securing-React-and-Laravel-Web-Application-with-OWA… #280

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

SyedAsadRazaDevops
Copy link

…SP-Security-Rules

October is National Cybersecurity Awareness month Contribution

…SP-Security-Rules

October is National Cybersecurity Awareness month Contribution
Copy link

@jkowalleck jkowalleck left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please improve


## Introduction

In today's digital age, web application security is more critical than ever. With the ever-growing number of cyber threats, it's essential to follow best practices for securing your web applications. The Open Web Application Security Project (OWASP) provides a valuable framework to help developers implement security measures and protect their applications from common vulnerabilities. In this README, we'll provide an overview of how to secure your React and Laravel web application by adhering to OWASP security rules.
Copy link

@jkowalleck jkowalleck Oct 25, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Open Web Application Security Project (OWASP)

this is wrong

it is "Open Worldwide Application Security Project (OWASP)"

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

don

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done


## Introduction

In today's digital age, web application security is more critical than ever. With the ever-growing number of cyber threats, it's essential to follow best practices for securing your web applications. The Open Web Application Security Project (OWASP) provides a valuable framework to help developers implement security measures and protect their applications from common vulnerabilities. In this README, we'll provide an overview of how to secure your React and Laravel web application by adhering to OWASP security rules.
Copy link

@jkowalleck jkowalleck Oct 25, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In this README, we'll provide [...]

what README? this is supposed to be a blog post, right?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

## 2. Cross-Site Scripting (XSS) Prevention
XSS attacks can be prevented by validating and sanitizing user inputs, using Content Security Policy (CSP) to restrict script sources, and escaping data when rendering it in your web application.
An example in your React component might look like this:
````

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why not add language hints to the code fence?

```javascript

function displayMessage(message) {
    document.getElementById('message-box').innerHTML = message;
}
```

7. [Regular Security Testing](#regular-security-testing)

## *The OWASP Top Seven (7): A Roadmap to Security*
The OWASP Top Ten is a foundational resource for understanding the most prevalent web application security risks. As developers, it is essential to comprehend these risks and take proactive steps to mitigate them. Let's take a closer look at the OWASP Top Ten and how to address each risk.
Copy link

@jkowalleck jkowalleck Oct 25, 2023

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The OWASP Top Ten is [...]

Please add a link to the OWASP Top Ten you are referring to. And use the proper name.
There are multiple projects that publish a "OWASP top 10".

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These suggestions are valuable, but they may require a different approach when implementing them in custom code from a developer's perspective. That's why I removed the links. Please proceed with this in mind.

Copy link
Author

@SyedAsadRazaDevops SyedAsadRazaDevops left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the changing had been reflected , kindly review it

7. [Regular Security Testing](#regular-security-testing)

## *The OWASP Top Seven (7): A Roadmap to Security*
The OWASP Top Ten is a foundational resource for understanding the most prevalent web application security risks. As developers, it is essential to comprehend these risks and take proactive steps to mitigate them. Let's take a closer look at the OWASP Top Ten and how to address each risk.
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These suggestions are valuable, but they may require a different approach when implementing them in custom code from a developer's perspective. That's why I removed the links. Please proceed with this in mind.


## Introduction

In today's digital age, web application security is more critical than ever. With the ever-growing number of cyber threats, it's essential to follow best practices for securing your web applications. The Open Web Application Security Project (OWASP) provides a valuable framework to help developers implement security measures and protect their applications from common vulnerabilities. In this README, we'll provide an overview of how to secure your React and Laravel web application by adhering to OWASP security rules.
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

don


## Introduction

In today's digital age, web application security is more critical than ever. With the ever-growing number of cyber threats, it's essential to follow best practices for securing your web applications. The Open Web Application Security Project (OWASP) provides a valuable framework to help developers implement security measures and protect their applications from common vulnerabilities. In this README, we'll provide an overview of how to secure your React and Laravel web application by adhering to OWASP security rules.
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done


## Introduction

In today's digital age, web application security is more critical than ever. With the ever-growing number of cyber threats, it's essential to follow best practices for securing your web applications. The Open Web Application Security Project (OWASP) provides a valuable framework to help developers implement security measures and protect their applications from common vulnerabilities. In this README, we'll provide an overview of how to secure your React and Laravel web application by adhering to OWASP security rules.
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

@SyedAsadRazaDevops
Copy link
Author

the need changing is done

@SyedAsadRazaDevops
Copy link
Author

Please merge the code corrections

@SyedAsadRazaDevops
Copy link
Author

Please merge the code corrections.

@vanderaj
Copy link
Member

vanderaj commented Sep 3, 2024

Can you please add your image for the people assets folder, and we'll publish this on October 1 to kick off Cyber Security Month. Sorry for not seeing this until now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants