Skip to content

Commit aff6e74

Browse files
authored
Publish Latest 2025-04-24 (#447)
Updates based on OWASP/wstg@1971d26
1 parent 3e64ff4 commit aff6e74

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

latest/4-Web_Application_Security_Testing/10-Business_Logic_Testing/01-Test_Business_Logic_Data_Validation.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ The bank account to which the payments were directed had only 1000 free transfer
5353
- Once found try to insert logically invalid data into the application/system.
5454
Specific Testing Method:
5555
- Perform frontend GUI Functional Valid testing on the application to ensure that the only "valid" values are accepted.
56-
- Using an intercepting proxy observe the HTTP POST/GET looking for places that variables such as cost and quality are passed. Specifically, look for "hand-offs" between application/systems that may be possible injection or tamper points.
56+
- Using an intercepting proxy observe the HTTP POST/GET looking for places that variables such as cost and quantity are passed. Specifically, look for "hand-offs" between application/systems that may be possible injection or tamper points.
5757
- Once variables are found start interrogating the field with logically "invalid" data, such as social security numbers or unique identifiers that do not exist or that do not fit the business logic. This testing verifies that the server functions properly and does not accept logically invalid data.
5858

5959
## Related Test Cases
@@ -75,4 +75,4 @@ The application/system must ensure that only "logically valid" data is accepted
7575
## References
7676

7777
- [OWASP Proactive Controls (C5) - Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs)
78-
- [OWASP Cheatsheet Series - Input_Validation_Cheat_Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html)
78+
- [OWASP Cheat Sheet Series - Input_Validation_Cheat_Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html)

0 commit comments

Comments
 (0)