ここが変だよ、グローバルスタンダードの脆弱性対策～入力値の考え方～5. OWASP Top 10 2004 A1: Unvalidated Input A2: Broken Access Control A3: Broken Authentication and Session Management A4: Cross Site Scripting A5: Buffer Overflow A6: Injection Flaws A7: Improper Error Handling A8: Insecure Storage A9: Application Denial of Service A10: Insecure Configuration Management https://www.owasp.org/index.php/Top_10_2004 参照 5 6. PCI DSSでも 6.5 すべての Webアプリケーションは「Open Web Ap
