Cargando…

Hands-On Oracle Application Express Security : Building Secure Apex Applications.

Detalles Bibliográficos
Clasificación:Libro Electrónico
Autor Corporativo: Ltd., RecX
Otros Autores: Austwick, Tim
Formato: Electrónico eBook
Idioma:Inglés
Publicado: Somerset : John Wiley & Sons, 2013.
Temas:
Acceso en línea:Texto completo
Tabla de Contenidos:
  • Hands-On Oracle Application Express Security: Building Secure Apex Applications
  • Copyright
  • About the Authors
  • About the Technical Editor
  • Acknowledgments
  • Contents
  • Introduction
  • Structure
  • Some Basics
  • APEX URL Format
  • JavaScript Console
  • Other Resources
  • Chapter 1: Access Control
  • The Problem
  • The Solution
  • Authentication
  • Application Authentication
  • Page Authentication
  • Authorization
  • Application Authorization
  • Page Authorization
  • Button and Process Authorization
  • Process Authorization â€? On-DemandFile Upload
  • Summary
  • Chapter 2: Cross-Site Scripting
  • The Problem
  • The Solution
  • Examples
  • Understanding Context
  • Reports
  • Report Column Display type
  • Report Column Formatting â€? HTML Expressions
  • Report Column Formatting â€? Column Link
  • Report Column â€? List of Values
  • Direct Output
  • Summary
  • Chapter 3: SQL Injection
  • The Problem
  • The Solution
  • Validation
  • Examples
  • Dynamic SQL â€? Execute Immediate
  • Example
  • Dynamic SQL â€? Cursors
  • Example
  • Dynamic SQL â€? APEX APIExample
  • Function Returning SQL Query
  • Example
  • Substitution Variables
  • Example
  • Summary
  • Chapter 4: Item Protection
  • The Problem
  • The Solution
  • Validations
  • Value Protected
  • Page Access Protection
  • Session State Protection
  • Prepare_Url Considerations
  • Ajax Considerations
  • Examples
  • Authorization Bypass
  • Form and Report
  • Summary
  • Appendix A: Using Apexsec to Locate Security Risks
  • Apexsec Online Portal
  • Apexsec Desktop
  • Appendix B: Updating Item Protection
  • Appendix C: Untrusted Data ProcessingExpected Value
  • Safe Quote
  • Colon List to Comma List
  • Tag Stripping