Secure Code Wiki: O se upega tafailagi o le saogalemu coding lelei gaioiga

Secure Code Wiki: O se upega tafailagi o le saogalemu coding lelei gaioiga

Mo le alualu i luma o Malamalama ma Aogama le Saienisi ma tekinolosi I se tulaga lautele, sa avea pea ma mea sili ona taua ile faʻatinoina ole sili atu ma sili atu ona aoga gaioiga, fua poʻo ni fautuaga (Taʻitaʻiga lelei) ia ausia le sini autu o, aumai fua soʻo se gaioiga poʻo se gaioiga.

Ma le Polokalame po o le Atinaʻeina o polokalama Pei o seisi lava galuega faʻapolofesa ma le IT, ei ai lana lava "Amioga lelei" fesoʻotaʻi ma le tele o lalolagi, aemaise i latou fesoʻotaʻi ma Cybersecurity o le polokalama oloa gaosia. Ma i lenei tulaga o le a tatou tuuina atu nisi «Lelei Faʻatonuga Faʻamasani Faigofie », mai se uepisaite manaia ma aoga valaʻauina "Secure Code Wiki", tele e uiga Atinaʻe Atinae leai se totogi ma tatala, pei o oe lava ma tapunia.

Laisene mo le atinaʻeina o le Free ma Open Software: Faʻatino lelei

Ae le i oʻo i le mataupu, pei ona masani ai, o le a tatou tuʻua mulimuli ane nisi fesoʻotaʻiga i taimi muamua lolomi fesoʻotaʻi ma le autu o «Lelei Faʻataʻitaʻiga i Polokalame poʻo Atinaʻe Atinaʻe ».

"… O amioga lelei na afuafua ma faʻasalalau e le "Tulafono mo Atinaʻe Atinaʻe" o le Inter-American Development Bank, i luga o le lautele o le Laisene Polokalama, lea e tatau ona ave pe a atiaʻe polokalama polokalama (digital mea faigaluega), aemaise lava maua fua ma tatala." Laisene mo le atinaʻeina o le Free ma Open Software: Faʻatino lelei

Tusitusiga fesoʻotaʻi:

Laisene mo le atinaʻeina o le Free ma Open Software: Faʻatino lelei

Tusitusiga fesoʻotaʻi:

Tulaga Faʻapitoa: Lelei faʻataʻitaʻi i le atinaʻeina o Polokalama Polokalama

Tusitusiga fesoʻotaʻi:

Lelei faiga e atiaʻe saoloto ma matala polokalama: Faʻamaumauga

Secure Code Wiki: Lelei Faigofie Faʻaaogaina Faʻailogaina

Ole a le Secure Code Wiki?

Pei ona fai mai lana tusitusiga upega tafaʻilagi:

"Secure Code Wiki o se taualuga o le saogalemu coding gaioiga mo le tele o ituaiga o gagana."

Ma o oe o faiga lelei ma le 'upega tafaʻilagi a "Secure Code Wiki" na faia ma tausia e se faʻalapotopotoga Initia valaʻauina Payatus.

Faʻataʻitaʻiga o Lelei Faʻatinoina e ituaiga o Gagana Faapolokalameina

Talu ai, o le 'upega tafaʻilagi o loʻo i le Igilisi, o le a faʻaalia nisi faʻataʻitaʻiga o le saogalemu coding uiga eseese polokalame o polokalame, o nisi e leai se totogi ma tatala, ma isi e le faalauaʻiteleina ma tapunia, ofaina e fai mai 'upega tafaʻilagi i suʻesuʻe i le gafatia ma le lelei o mataupu utaina

I se faʻaopopoga, e taua le faʻamamafaina o lena Faʻatinoga lelei faʻaalia luga o le Atinaʻe Atinae mulimuli mai:

• .NET
• Java
• Java Mo Android
• Kotlin
• NodeJS
• Manulauti C
• PHP
• Python
• maʻa mū
• Swift
• WordPress

Ua vaevaeina i latou i vaega nei mo Desktop Languages:

• A1 - Tui (Tui)
• A2 - Faʻamaonia le motusia (Taui Faʻamaonia)
• A3 - Faʻaalia o faʻamatalaga maaleale (Faʻaalia Faʻailoaina Faʻamatalaga)
• A4 - XML ​​Oloa i fafo (XML Vaega i fafo / XXE)
• A5 - Faʻatonutonu avanoa ulufale (Pulea Avanoa Pulea)
• A6 - Faʻasaʻoina o le saogalemu (Faʻasologa sese o le puipuiga)
• A7 - Koluse Nofoaga Tusitusiga (Kolisi-Nofoaga Tusitusi / XSS)
• A8 - Faʻaleagaina le faʻaleagaina o le fale (Le mautonu Deserialization)
• A9 - Faʻaaogaga o vaega ma iloa vaivai (Faʻaaoga o Vaega ma Mauaina Faigata)
• A10 - Le lava le lesitalaina ma le vaʻavaʻaia (Le lava le ogalaau & mataituina)

Ma vaevaeina foi i vaega nei mo Mobile Languages:

• M1 - Le talafeagai le faʻaogaina o le tulaga (Faigofie Faʻavae Faʻaogaina)
• M2 - Teuina faʻamatalaga le mautinoa (Teuina Faʻamatalaga Teuina)
• M3 - Fesoʻotaʻiga le mautinoa (Fesoʻotaʻiga le mautinoa)
• M4 - Faʻamaoniga le mautinoa (Faamaoniga le mautinoa)
• M5 - Le lava faʻamatalaga faʻaopoopo (Le lava le Cryptography)
• M6 - Faʻamaoniga le saogalemu (Faʻatagaina le mautinoa)
• M7 - Tulaga lelei o tagata faʻatau (Client Tulafono Tulaga)
• M8 - Faʻaogaina o tulafono (Faʻafefe Tulafono)
• M9 - Faʻafouina Inisinia (Faʻafouina Inisinia)
• M10 - Faʻaaogaiga eseʻese (Faigaluega Maoae)

Faʻataʻitaʻiga 1: .Net (A1- Tui)

O le faʻaaogaina o se mea faʻafanua fesoʻotaʻiga (ORM) poʻo le teuina o ni auala e sili ona lelei auala e teteʻe ai i le SQL tui vaivai.

Faʻataʻitaʻiga 2: Java (A2 - Authentication broken)

Afai e mafai, faʻatino le tele-vaega faʻamaoniga e puipuia ai otometi, faʻamaonia agavaʻa, malosi sauā, ma le toe faʻaaogaina o gaoi faʻamaoniga.

Faʻataʻitaʻiga 3: Java Mo Android (M3 - Fesoʻotaʻiga le mautinoa)

E taua le faʻaaogaina o SSL / TLS i auala o felauaiga e faʻaaogaina e le telefoni feaveaʻi e lafo ai faʻamatalaga maaleale, faʻailoga o sauniga poʻo isi faʻamaumauga maʻaleʻale i se backend API poʻo se 'upega tafaʻilagi tautua.

Faʻataʻitaʻiga 4: Kotlin (M4 - Faʻamaoniga le mautinoa)

Aloese mai mamanu vaivai

Faʻataʻitaʻiga 5: NodeJS (A5 - Leaga Lelei o le Pulea)

O le faʻataʻitaʻiga o faʻatonuga faʻatonu e tatau ona faʻamalosia le umiaina o faʻamaumauga, nai lo le faʻatagaina le tagata faʻaaoga e fausia, faitau, faʻafou, pe aveese soʻo se faamaumauga.

Faʻataʻitaʻiga 6: Sini Aʻoga C (M6 - Faʻatagaina le mautinoa)

O talosaga e tatau ona aloese mai le faʻaaogaina o numera taumate o se faʻailoa faʻasino.

Faʻataʻitaʻiga 7: PHP (A7 - Cross Site Scripting)

Faʻailoga uma tagata faʻapitoa e faʻaaoga ai htmlspecialchars () poʻo le htmlentities () [peʻa oʻo i totonu o html tags].

Faʻataʻitaʻiga 8: Python (A8 - Insecure Deserialization)

O le piko ma le jsonpickle module e le sefe, aua neʻi faʻaogaina e faʻateʻa ai faʻamaumauga le talitonuina.

Faʻataʻitaʻiga 9: Python (A9 - Faʻaaoga o Vaaia ma Faʻamaoniga le lelei)

Tamoe i le tusi talosaga ma le laʻititi faʻamanuiaga

Faʻataʻitaʻiga 10: Vave (M10 - Uiga eseʻesega)

Aveʻese natia backside gaioiga poʻo isi totonu atinaʻe puipuiga puipuiga e le fuafuaina e faʻasaʻolotoina i se gaosiga siosiomaga

Faʻataʻitaʻiga 11: WordPress (XML-RPC Faʻaleaogaina)

XML-RPC o se WordPress vaega e mafai faʻamaumauga fesiitai i le va WordPress ma isi faiga. O aso nei ua tele na suia e le REST API, ae o loʻo aofia ai pea i totonu o mea e faʻapipiʻi ai mo tua i tua. Afai e mafai i le WordPress, e mafai e se tagata osofaʻi ona faʻamalosia le malosi, osofaʻi i tua o pingback (SSRF), ma isi.

Faaiuga

Matou te talosia ia lenei "aoga laiti pou" e uiga i le 'upega tafaʻilagi ua valaʻauina «Secure Code Wiki», e ofaina taua mea taua e fesoʻotaʻi ma «Lelei Faʻatonuga Faʻamasani Faigofie »; e matua fiafia ma aoga, mo le atoa «Comunidad de Software Libre y Código Abierto» ma le sao tele i le faʻasalalauina o le matagofie, tele ma olaolaolaolaolaolaolaolaolaolaolaolaaga o faʻaogaina o «GNU/Linux».

Mo le taimi nei, pe afai e te fiafia i lenei publicación, Aua le tuʻu fefaasoaaʻi ma isi, i luga o lau 'upega tafaʻilagi e te fiafia iai, auala, kulupu poʻo faʻalapotopotoga o fesoʻotaʻiga i luga o le upega tafaʻilagi poʻo feau feaveaʻi, e sili ona maua fua, tatala ma / pe sili atu le saogalemu e pei o uālesi, Faailoga, Mastodon poʻo seisi o Faigofie, sili atu.

Ma manatua e asiasi i le matou itulau itulau i «MaiLinux» e suʻesuʻe atili talafou, faʻatasi ai ma le auai i la matou auala faʻapitoa o Telegram mai DesdeLinux. A o, mo nisi faʻamatalaga, e mafai ona e asia soʻo Faletusi i luga ole laiga como OpenLibra y jedit, ia maua ma faitau tusi numera (PDF) i lenei mataupu poʻo isi.