Skip to content

[pull] master from OWASP:master #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 45 commits into from
Jun 5, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
45 commits
Select commit Hold shift + click to select a range
803cfbe
fix #75 link to real site
gavjl Mar 8, 2023
9e0561a
Renamed file name to reflect new name as it appears inside the file
guybensimhon Mar 15, 2023
f0411ef
Update 0xa2-broken-authentication.md
securitylevelup Mar 15, 2023
6c7e6bd
refactor: add a reference to Security Headers on "How to Prevent" sec…
PauloASilva Mar 17, 2023
1ae47b3
feat: Add recommendation regarding supported incoming content types
PauloASilva Mar 17, 2023
125d5f4
Merge tag 'v2.1.0' into develop
PauloASilva Mar 28, 2023
79d9b20
Merge tag 'v2.1.1' into develop
PauloASilva Apr 3, 2023
27c6c75
Update 0xa6-server-side-request-forgery.md
victorive Apr 25, 2023
6744916
fix(A6:2023RC): Remove additional forward slash
PauloASilva Apr 27, 2023
9c04a18
refactor(A7:2023RC): add a reference to Security Headers
PauloASilva Apr 27, 2023
e3c777c
feat(A7:2023RC): Add recommendation regarding supported incoming cont…
PauloASilva Apr 27, 2023
4247a33
refactor(A2:2023RC): remove "public-facing"
PauloASilva Apr 27, 2023
7407b39
refactor(A9:2023RC): rename source file after the category name
PauloASilva Apr 27, 2023
8941ded
style(A9:2023RC): max line length
PauloASilva Apr 27, 2023
b5ffae2
fix(A9:2023RC): replace hostname example
PauloASilva Apr 27, 2023
96d08ca
Merge branch 'master' into develop
PauloASilva May 3, 2023
795e239
chore(API1:2023): Review heading table contents
PauloASilva May 7, 2023
2a62a63
chore(API2:2023): Review heading table contents
PauloASilva May 7, 2023
50db5f7
fix(API1:2023): clarify the technical impact
PauloASilva May 8, 2023
48e412e
chore(API3:2023): Review heading table contents
PauloASilva May 8, 2023
207796e
chore(API4:2023): Review heading table contents
PauloASilva May 8, 2023
7164d32
chore(API5:2023): Review heading table contents
PauloASilva May 8, 2023
dddfab6
chore(API6:2023): Review heading table contents
PauloASilva May 8, 2023
e487306
chore(API7:2023): Review heading table contents
PauloASilva May 8, 2023
be7d397
chore(API8:2023): Review heading table contents
PauloASilva May 8, 2023
d06aa67
chore(API9:2023): Review heading table contents
PauloASilva May 8, 2023
4216531
chore(API10:2023): Review heading table contents
PauloASilva May 8, 2023
3717bdc
chore(2023): Add missing sections
PauloASilva Jun 3, 2023
ceeea92
Bump version to 2.2.0
PauloASilva Jun 3, 2023
45f4616
Merge branch 'feature/missing-sections' into release/2.2.0
PauloASilva Jun 3, 2023
08b95de
Merge branch 'release/2.2.0' into feature/review-heading-tables
PauloASilva Jun 3, 2023
18d2594
chore(2023): Risk rating review + proofreading
PauloASilva Jun 3, 2023
36a2e23
refactor(2023): Automated threats
PauloASilva Jun 3, 2023
0bf4b62
fix(2023): Proofreading
PauloASilva Jun 3, 2023
0ec1587
fix(2023): dates & titles
PauloASilva Jun 4, 2023
73040c2
feat: repository converted to MkDocs monorepo
PauloASilva Jun 5, 2023
7a55fd9
ci: build and deploy website on push
PauloASilva Jun 5, 2023
161fa69
ci: use MkDocs v9.0.9
PauloASilva Jun 5, 2023
19c85e3
fix: add `site_url`
PauloASilva Jun 5, 2023
8121458
fix: licensing
PauloASilva Jun 5, 2023
b779f34
fix: use absolute URLs for language switching
PauloASilva Jun 5, 2023
c97c868
fix: missing contributor
PauloASilva Jun 5, 2023
b1cfa51
refactor: add link to respective category
PauloASilva Jun 5, 2023
ca50a68
ci: build gh-pages only on push to `master` branch
PauloASilva Jun 5, 2023
3a0ce12
Merge branch 'release/2.2.0'
PauloASilva Jun 5, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
name: ci
on:
push:
branches:
- master
permissions:
contents: write
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: actions/setup-python@v4
with:
python-version: 3.x
- run: echo "cache_id=$(date --utc '+%V')" >> $GITHUB_ENV
- uses: actions/cache@v3
with:
key: mkdocs-material-${{ env.cache_id }}
path: .cache
restore-keys: |
mkdocs-material-
- run: pip install mkdocs-material==9.0.9
- run: pip install git+https://github.com/PauloASilva/mkdocs-monorepo-plugin@feat/i18n
- run: mkdocs gh-deploy --force
97 changes: 0 additions & 97 deletions 2023/en/src/0xa8-lack-of-protection-from-automated-threats.md

This file was deleted.

78 changes: 49 additions & 29 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
How to Contribute
=================
# How to Contribute

When contributing to this repository, please first discuss the change you wish
to make via submitting an issue with the owners of this repository before making
Expand All @@ -9,6 +8,7 @@ discussion.
## Branching Model

This repository holds two main branches with an infinite lifetime:

* `master` is the default branch which always reflects the latest release.
* `develop` is the main branch reflecting the latest delivered changes for the
next release. When the `develop` branch reaches a stable point and is ready to
Expand All @@ -22,38 +22,58 @@ branches have a limited lifespan, since they will be removed eventually.
Contributions to this repository are welcome. For ease of managing, please
follow the steps below:

1. Fork this repository to your account.
1. Fork this repository to your account.

2. Clone your copy of this repository, locally.

```
git clone https://github.com/YOU/API-Security.git
```

3. Create a new branch based on `develop` (e.g., `fix/foreword-section`).

```
git checkout develop && git checkout -b fix/foreword-section
```

4. Apply your changes.

Please, always follow our style conventions.


Although there's an [`.editorconfig` file][1] on repository's root, your
editor may not support it. To learn more about [EditorConfig][2] and text
editors/IDEs support, check the website: https://editorconfig.org/.
You can preview your changes, [rendering the web site locally][4].

5. Commit your changes.

1. Check modified files and add only required ones (e.g., build artifacts
SHOULD NOT be tracked).
2. The first line of the commit message should provide a brief description
of your changes. You can go into more details on the optional commit
message body.

2. Clone your copy of this repository, locally.
```
git clone https://github.com/YOU/API-Security.git
```
3. Create a new branch based on `develop` (e.g., `fix/foreword-section`).
```
git checkout develop && git checkout -b fix/foreword-section
```
4. Apply your changes.
6. Push changes to your public repository.

Please, always follow our style conventions.
```
git push origin fix/foreword-section
```

Although there's an [`.editorconfig` file][1] on repository's root, your
editor may not support it. To learn more about [EditorConfig][2] and text
editors/IDEs support, check the website: https://editorconfig.org/.
7. Open a Pull Request from your `fix/foreword-section` to the upstream
repository `develop` branch.

5. Commit your changes.
### Rendering the Web Site Locally

1. Check modified files and add only required ones (e.g., build artifacts
SHOULD NOT be tracked).
2. The first line of the commit message should provide a brief description of
your changes. You can go into more details on the optional commit message
body.
The web site is built using [Material for MkDocs][3] and several plugin.
Although you can manually install everything, we've bundled everything into a
Docker image that you can use to render the web site locally:

6. Push changes to your public repository.
```
git push origin fix/foreword-section
```
7. Open a Pull Request from your `fix/foreword-section` to the upstream
repository `develop` branch.
```
docker compose up
```

[1]: .editorconfig
[1]: https://github.com/OWASP/API-Security/blob/master/.editorconfig
[2]: https://editorconfig.org/
[3]: https://squidfunk.github.io/mkdocs-material/
[4]: #rendering-the-web-site-locally
7 changes: 7 additions & 0 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
FROM squidfunk/mkdocs-material:9.0.9

ENV MKDOCS_MONOREPO_REPO=https://github.com/PauloASilva/mkdocs-monorepo-plugin
ENV MKDOCS_MONOREPO_BRANCH="feat/i18n"

RUN python -m pip install git+$MKDOCS_MONOREPO_REPO@$MKDOCS_MONOREPO_BRANCH
RUN python -m pip install pymdown-extensions
Loading