New CS proposal: NoSQL Security Cheat Sheet #1851
Description
What is the proposed Cheat Sheet about?
Cheat sheet will be about guidance to reduce risk when using NoSQL systems.
What security issues are commonly encountered related to this area?
NoSQL Injections
Exposed Interface
Public APIs and CORS
What is the objective of the Cheat Sheet?
Provide clear, actionable defensive patterns for developers and operators of NoSQL databases.
What other resources exist in this area?
https://www.mongodb.com/docs/manual/security/
https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/05.6-Testing_for_NoSQL_Injection