Skip to content

Commit

Permalink
🤖 fmt
Browse files Browse the repository at this point in the history
  • Loading branch information
wurstbrot authored Nov 11, 2023
1 parent e7064f6 commit b92636c
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 17 deletions.
7 changes: 7 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,10 @@
## [1.7.2](https://github.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data/compare/v1.7.1...v1.7.2) (2023-11-11)


### Bug Fixes

* Contextualized encoding uuid ([0e5e572](https://github.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data/commit/0e5e572fc2365d8c4574f3262bf09d6659b4b46d))

## [1.7.1](https://github.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data/compare/v1.7.0...v1.7.1) (2023-11-11)


Expand Down
21 changes: 4 additions & 17 deletions src/assets/YAML/generated/generated.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3470,10 +3470,10 @@ Implementation:
B: false
C: false
Contextualized Encoding:
identifier: e1f37abb-d848-4a3a-b3df-65e91a89dcb7
hazard: The generation of interpreter directives from user-provided data poses
uuid: e1f37abb-d848-4a3a-b3df-65e91a89dcb7
risk: The generation of interpreter directives from user-provided data poses
difficulties and can introduce vulnerabilities to injection attacks.
remediation: |
measure: |
Implementing contextualized encoding, such as employing object-relational mapping tools or utilizing prepared statements, nearly removes the threat of injection vulnerabilities.
difficultyOfImplementation:
knowledge: 2
Expand All @@ -3483,20 +3483,7 @@ Implementation:
level: 1
description: |
Bear in mind that utilizing frameworks is a recommended approach; however, they can develop known security weaknesses over time. Diligent and regular patching is crucial.
implementation:
- uuid: 88767cde-1610-402e-98ec-bc3575377183
name: OWASP ASVS
tags: []
url: https://owasp.org/www-project-application-security-verification-standard/
- uuid: 7bf90650-a53a-4581-a214-1afd5de3a059
name: OWASP MASVS
tags: []
url: https://github.com/OWASP/owasp-masvs
- uuid: 596cb528-8981-4723-bcc3-22c261f26114
name: API Security Maturity Model for Authorization
tags:
- api
url: https://curity.io/resources/learn/the-api-security-maturity-model/
implementation: []
references:
samm2:
- D-SR-1-A
Expand Down

0 comments on commit b92636c

Please sign in to comment.