Skip to content

Conversation

@KadirArslan
Copy link
Contributor

I've added new cheat sheet about NoSQL security.
It contains most popular NoSQL vulnerabilities and preventations.

If your PR is related to an issue, please finish your PR text with the following line:

This PR fixes issue #1851.

@KadirArslan KadirArslan changed the title Create NoSQL_Security_Cheat_Sheet.md Add Cheat Sheet: NoSQL Security Cheat Sheet Oct 13, 2025
@KadirArslan
Copy link
Contributor Author

there was a mistake on PR name, fixed it

@mackowski
Copy link
Collaborator

A ot of the content overlaps with https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Database_Security_Cheat_Sheet.md I think it is better to update that cheatsheet than try to keep both of them up to date

Copy link
Collaborator

@mackowski mackowski left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@KadirArslan
Copy link
Contributor Author

KadirArslan commented Oct 13, 2025

A ot of the content overlaps with https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Database_Security_Cheat_Sheet.md I think it is better to update that cheatsheet than try to keep both of them up to date

I thought it is a better idea to cover only nosql databases on separated cheat sheet. Because it'll make it too long maybe complex for the developer. We can also update DB Security cheat sheet to cover only relational dbs (I can handle it) and give ref to NoSQL one.

wdyt? @mackowski

@jmanico
Copy link
Member

jmanico commented Oct 13, 2025

I think a separate cheetsheet is a good idea. Can you also remove the NoSQL info from the database cheatsheet and link to your new cheatsheets?

I think smaller, focused cheatsheets are a good idea.

Is this ok with you @mackowski ?

@KadirArslan
Copy link
Contributor Author

I think a separate cheetsheet is a good idea. Can you also remove the NoSQL info from the database cheatsheet and link to your new cheatsheets?

#1855

I’ve created an issue for this and will take care of it. I’ll also review the Database Security Cheat Sheet to ensure it contains all necessary things and up to date.

is it ok for you? @jmanico

@jmanico
Copy link
Member

jmanico commented Oct 13, 2025

I like this plan.

@mackowski
Copy link
Collaborator

I like this plan!

@KadirArslan KadirArslan requested a review from mackowski October 14, 2025 09:30
@KadirArslan
Copy link
Contributor Author

KadirArslan commented Oct 14, 2025

can we merge this one? so that I can give link to the other cheat sheet :) @mackowski

@mackowski mackowski merged commit 08037a8 into OWASP:master Oct 20, 2025
4 checks passed
@mackowski
Copy link
Collaborator

Merged!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants