From d1c5871ca6dafe01e9c61d7d8d32b2eb2536b150 Mon Sep 17 00:00:00 2001 From: wstgbot <62450690+wstgbot@users.noreply.github.com> Date: Wed, 1 Oct 2025 09:24:48 +0000 Subject: [PATCH] Publish Latest 2025-10-01 Updates based on OWASP/wstg@37d6202 --- .../01-Testing_for_Weak_Transport_Layer_Security.md | 1 + 1 file changed, 1 insertion(+) diff --git a/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/01-Testing_for_Weak_Transport_Layer_Security.md b/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/01-Testing_for_Weak_Transport_Layer_Security.md index 9e79ccc..3c82d82 100644 --- a/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/01-Testing_for_Weak_Transport_Layer_Security.md +++ b/latest/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/01-Testing_for_Weak_Transport_Layer_Security.md @@ -132,3 +132,4 @@ It can also be possible to performed limited testing using a web browser, as mod - [OWASP Transport Layer Protection Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet.html) - [Mozilla Server-Side TLS Guide](https://wiki.mozilla.org/Security/Server_Side_TLS) +- [CWE-1428: Reliance on HTTP instead of HTTPS](https://cwe.mitre.org/data/definitions/1428.html)