SoftwareSecurity2012/Group 9/Wanted Documentation

Uit Werkplaats
Ga naar: navigatie, zoeken

Wanted documentation

  • Documentation about specific functions within the code. Now we had to manually look through the code and determine what functions were supposed to do. Better documentation would save time. (But note that logging is by definition often spread trhough the code, so additional documentation would only help you if it said something specific about the logging, eg what is logged (eg. a "logging policy"), how it is done (ie. which pieces of the code do the logging, and which files the logs end up in) and which parts of the code are responsible for triggering this logging functionality.)
  • Documentation about secure logging. When it comes to verifying security requirements, there is some documentation (like the OWASP document), but a document concerning logging and/or error handling would have been helpful. (It is not clear if here you mean documentation in general, or about php specifically.)