OWASP Secure Coding Guidelines
The Open Web Application Security Project is an online community dedicated to the creation of free, open-source publications, documentation, tools, and technologies in the field of Web application security.
OWASP Secure Coding Checklist are
- Input Validation
- Output Coding
- Access Control
- File Management
- Database Security
- Memory Management
- Session Management
- Cryptographic Practices
- Error Handling and Logging
- Communication Security
- System Configuration
- General Coding Practices
- Authentication and Password Management
SANS25 Secure Coding Guidelines
A well-known compilation of the most frequent security vulnerabilities found in all types of systems, with the goal of installing security into every developer’s head.
- Out-of- Bounds read and Write
- Improper Authentication
- Unrestricted Upload of File with Dangerous Type
- Null Pointer Dereference
- Improper Control of Generation of Code
- Improper Certificate Validation