Skip to content
How to Catch the Top OWASP 2021 Security Category - Broken Access Control - in Code Review
hackerone.com | blog | #access-control | #code-review | #web-security | #api-security | #idor | #owasp | #broken-access-control | #least-privilege | #parameter-tampering
Summary
Part 1 of a series on catching broken access control in code review, explaining OWASP's top 2021 risk category and common forms from least-privilege violations to insecure direct object references.
- Published
- Collected