base on The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. # Welcome to the OWASP Cheat Sheet Series [](https://www.owasp.org/index.php/OWASP_Project_Inventory#tab=Flagship_Projects) [](https://creativecommons.org/licenses/by-sa/4.0/ "CC BY-SA 4.0") Welcome to the official repository for the Open Web Application Security Project® (OWASP) Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat sheets and **reference** them, use the project [official website](https://cheatsheetseries.owasp.org). The project details can be viewed on the [OWASP main website](https://owasp.org/www-project-cheat-sheets/) without the cheat sheets. :triangular_flag_on_post: Markdown files are the working sources and aren't intended to be referenced in any external documentation, books or websites. ## Cheat Sheet Series Team ### Project Leaders - [Jim Manico](https://github.com/jmanico) - [Jakub Maćkowski](https://github.com/mackowski) ### Core Team - [Kevin W. Wall](https://github.com/kwwall) - [Shlomo Zalman Heigh](https://github.com/szh) ## Chat With Us We're easy to find on Slack: 1. Join the OWASP Group Slack with this [invitation link](https://owasp.org/slack/invite). 2. Join the [#cheatsheets channel](https://owasp.slack.com/messages/C073YNUQG). Feel free to ask questions, suggest ideas, or share your best recipes. ## Contributions, Feature Requests, and Feedback We are actively inviting new contributors! To start, please read the [contribution guide](CONTRIBUTING.md). This project is only possible thanks to the work of many dedicated volunteers. Everyone is encouraged to help in ways large and small. Here are a few ways you can help: - Read the current content and help us fix any spelling mistakes or grammatical errors. - Choose an existing [issue](https://github.com/OWASP/CheatSheetSeries/issues) on GitHub and submit a pull request to fix it. - Open a new issue to report an opportunity for improvement. ### Automated Build This [link](https://cheatsheetseries.owasp.org/bundle.zip) allows you to download a build (ZIP archive) of the offline website. ### Local Build [](https://www.python.org/downloads/) The OWASP Cheat Sheet Series website can be built and tested locally by issuing the following commands: ```sh make install-python-requirements make generate-site make serve # Binds port 8000 ``` ### Container Build The OWASP Cheat Sheet Series website can be built and tested locally inside a container by issuing the following commands: #### Docker ```sh docker build -t cheatsheetseries . docker run --name cheatsheetseries -p 8000:8000 cheatsheetseries ``` #### Podman ```sh podman build -t cheatsheetseries . podman run --name cheatsheetseries -p 8000:8000 localhost/cheatsheetseries ``` ## Contributors - **From 2014 to 2018:** [V1](CONTRIBUTOR-V1.md) - Initial version of the project hosted on the [OWASP WIKI](https://wiki.owasp.org). - **From 2019:** [V2](https://github.com/OWASP/CheatSheetSeries/graphs/contributors) - Hosted on [GitHub](https://github.com/OWASP/CheatSheetSeries). ## Special thanks A special thank you to the following people for their help provided during the migration: - [Dominique Righetto](https://github.com/righettod): For his special leadership and guidance. - [Elie Saad](https://github.com/ThunderSon): For valuable help in updating the OWASP Wiki links for all the migrated cheat sheets and for years of leadership and other project support. - [Jakub Maćkowski](https://github.com/mackowski): For valuable help in updating the OWASP Wiki links for all the migrated cheat sheets. Open Web Application Security Project and OWASP are registered trademarks of the OWASP Foundation, Inc. ", Assign "at most 3 tags" to the expected json: {"id":"7799","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"