OWASP A07 & A08: Trusting Identity, Trusting Integrity
By Samyuktha Introduction There's a moment in every security review where you stop looking at the code and start asking a much older question: can I trust this? Trust who someone claims to be, and trust what a piece of software or data claims to be. That's really the throughline connecting OWASP's A07 and A08 categories. A07 : Authentication Failures asks whether an application can reliably…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
