Skip to content

/ ASVS

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

67 Open 561 Closed
67 Open 561 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
German Translation CSV
#875 opened Dec 3, 2020 by ztp-at
Prevent reuse of signed data
#872 opened Nov 17, 2020 by Sjord
3
v4.0.2-2.1.10 cites CWE-263 without warning about direct opposition
#871 opened Nov 8, 2020 by stiiin
Requirement from v3.0.1 - user should be able to logout from every page
#870 opened Oct 30, 2020 by elarlang
Better clarify the difference between ASVS and SAMM
#868 opened Oct 26, 2020 by omerlh 4.1
@vanderaj
V14.5.1 text improvement and (re)move log-related part to log category requirement
#862 opened Oct 25, 2020 by elarlang
V14.4.6 potential misleading advice in Referrer-Policy requirement
#861 opened Oct 25, 2020 by elarlang
1
Production data in test environment
#851 opened Oct 15, 2020 by Sjord
2
V14: administrators and users have to weaken the default security posture
#850 opened Oct 15, 2020 by Sjord
Move link to proactive control to its own column
#847 opened Oct 7, 2020 by Sjord
3
V3.2.3 Session storage
#843 opened Sep 23, 2020 by bretik
44
[For Improvement] Removal of checking of passwords during login against a set of breached passwords for 2.1.7
#841 opened Sep 16, 2020 by csfreak92
8
[For Improvement] Add flag/mark if an ASVS requirement is Pentestable or not
#840 opened Sep 16, 2020 by csfreak92
3.5.3 Stateless Token Signing should be L1
#839 opened Sep 10, 2020 by marcwickenden
1
Req # 2.2.5 - How would such a scenario look like?
#837 opened Aug 14, 2020 by dschwarz91
V3.2.2 - Session token length only 8 bytes...
#835 opened Aug 6, 2020 by TheAxZim
4
Add Appendix D: Blockchain Verification Requirements
#833 opened Jul 23, 2020 by GraoMelo
@tghosth
2
Machine parseable format does not include informative text enhancement
#821 opened Jul 13, 2020 by vanderaj 4.1
@jmanico @vanderaj
@danielcuthbert @tghosth
Semantic Versioning and the question of 4.1 vs 5.0
#819 opened Jul 12, 2020 by tghosth 4.1
4
Evaluate Use of OSCAL Standard enhancement
#817 opened Jul 8, 2020 by tohch4 4.1
1
Create requirements for application containers enhancement
#814 opened Jun 25, 2020 by lfservin 4.1
4
Control Stories and Scenarios enhancement
#813 opened Jun 22, 2020 by mario-platt 4.1
@jmanico @vanderaj
@danielcuthbert @tghosth
3
Cleanup verification descriptions from links Awaiting response MAKEFILE
#810 opened Jun 16, 2020 by elarlang 4.1
@vanderaj
4
French Translation Awaiting response
#805 opened Jun 8, 2020 by Marx314 4.1
@Marx314 @vanderaj
3
Does the ASVS cover desktop applications?
#803 opened Jun 4, 2020 by tghosth 4.1
@vanderaj
2
ProTip! Updated in the last three days: updated:>2020-12-01.
You can’t perform that action at this time.