WebAppSec/MozSecureWorld: Difference between revisions

Line 57: Line 57:
# X Design Planning
# X Design Planning
# X Figure out how to do [https://docs.djangoproject.com/en/dev/ref/templates/api/#loading-templates templates]
# X Figure out how to do [https://docs.djangoproject.com/en/dev/ref/templates/api/#loading-templates templates]
# Figure out how to put in database
# X Figure out how to put in database
# Make "about" pages for each bullet above
# X Know how to make pages with templates
#* have a generic django template
# basic: x-frame-options
# Code basic item first (x-frame-options, secure flag, httponly flag)
# basic: secure flag
# basic: httponly flag
# Use bleach for rich text.
# Use bleach for rich text.
# add decorators for data and business layers
# add decorators for data and business layers
# read about presentation layer
# read about presentation layer
# Complete initial presentation layer and CSS for basic item
# Complete initial presentation layer and CSS for basic item
# Setup backend database
# Authentication/login
# Authentication/login
# File upload stuff
# File upload stuff
# Write about page for each vulnerability


== Links References ==
== Links References ==
https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines
https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines
67

edits