Difference between revisions of "OWASP Stinger Version 2"

Jump to: navigation, search
Line 7: Line 7:
==Project Lead==
==Project Lead==
The OWASP Stinger Project is lead by [mailto:eric.sheridan@owasp.org Eric Sheridan]
The OWASP Stinger Project is led by [mailto:eric.sheridan@owasp.org Eric Sheridan]

Revision as of 13:39, 23 November 2006


The J2EE platform does not include any validation features. This leaves many organizations to craft their own validation mechanisms, often incomplete, flawed, and inefficient.

OWASP Stinger 2.x is an implementation of the design principals detailed in the OWASP Validation Documentation. The basic idea is to define validation rules for the cookies and parameters of an HTTP request. These rules are specified in simple XML files using the 'Security Validation Definition Language.' Furthermore, Stinger 2 is implemented as a J2EE filter such that all HTTP traffic is validated before it is ever processed by the web application.

Project Lead

The OWASP Stinger Project is led by Eric Sheridan


Stinger is offered under the LGPL. For further information on OWASP licenses, please consult the OWASP Licenses page.


  • Click here to download the latest version of the OWASP Stinger 2.x series
  • Click here to view all OWASP Stinger 2.x releases
  • Click here to view the OWASP Stinger 2.x Manual

Feedback and Participation

We hope you find Stinger useful. Please contribute back to the project by sending your comments, questions, and suggestions to the Stinger mailing list. Thanks!

To join the OWASP Stinger mailing list or view the archives, please visit the subscription page.

Project Sponsors

The OWASP Stinger project is sponsored by Aspect_logo.gif.