WebAppSec/Filing In Bugzilla: Difference between revisions

WebAppSec/Filing In Bugzilla (view source)

79 bytes removed , 21 August 2012

24

edits

@@ Line 74: / Line 74: @@
 * sec-low
 * sec-other
+Keywords also help categorize the kind of bug (i.e. XSS, CSRF, etc). Please use the list here to determine the appropriate keywords: https://wiki.mozilla.org/Security_Severity_Ratings
 ====Whiteboard Tags====
-As with keywords, whiteboard tags assist the security team is sorting and categorizing security bugs. This page lists the available whiteboard tags: https://wiki.mozilla.org/WebAppSec/Web_App_Severity_Ratings
+Whiteboard tags are not typically used with web security vulnerabilities. Please use keywords as described above.
-Be sure to include both the severity tag as well as the infrasec tag.
-As an example, a reflected XSS vulnerability would have whiteboard tags: [ws:high][infrasec:xss]
 ====Additional Options====