Confirmed users
491
edits
WebAppSec/Security Review Request: Difference between revisions
Jump to navigation
Jump to search
WebAppSec/Security Review Request (view source)
Revision as of 21:44, 14 October 2011
, 14 October 2011no edit summary
No edit summary |
|||
| Line 1: | Line 1: | ||
= Am I in the right place? = | |||
An Infrastructure Security review is required for any new Mozilla web application before it is launched. We have many security reviews each quarter; it is best to file a security review request at the beginning of your project. | |||
= What happens during the security review? = | |||
The Infrastructure Security team will review the finished code and running stage instance of the web application to identify security vulnerabilities that could place Mozilla systems or our users at risk. The best way to prepare your application is to review the [https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines Mozilla Secure Coding Guidelines] and design the application with these principals in mind. Don't hesitate to ask us questions during any point of code development. You can reach our team at infrasec@mozilla.com | |||
= Infrasec Security Review Request = | = Infrasec Security Review Request = | ||