One of the best service provider: Host your Web site with StartLogic!


affiliate_link

Cacheable Login Page Found

It is possible to steal or manipulate user session and cookies, which may be used to

Impersonate a legitimate user, allowing the hacker to view or alter user details, and to perform transactions o behalf of that user.

Do not allow caching of login pages.  Discuss with solution architect in your project to discuss if business requirements are against this.

There are a few coding causing security breaches in any web applications. Application security is a key factor and need to be considered equally important as the business functionality. Guidelines document of a project should contain are not just best practises, they are mandatory. Code review (manual or automated) should reject the release if a particular piece of the code is failed to comply with these guidelines.

Development team should make sure their configuration is not point to production environment. Development team lead should validate the configuration file that is used by their team.

Suggestion: It is suggested that development lead should to take control configuration file and need to be circulated among the team members. Or alternative check this in source control to use by the team.

Next »