Disclaimer

This guide discusses the security options and features available in the Oracle InForm Clinical Data API that help mitigate security risks published in the OWASP Top 10 list of security vulnerabilities for the year 2017.

The set of recommendations in this guide is not exhaustive and no guarantee is given that implementing all the suggestions in this guide provides sufficient protection for all security threats listed in the OWASP Top 10. The reason for this disclaimer is that you cannot delegate responsibility for secure application development to a 3rd party or a single document. This guide is to help developers that know security to identify tools and features in the Oracle InForm Clinical Data API that they can use to implement application security. This guide does not replace a formal code review process and secure development practice.