Secure web application development environment

1. A method for developing a secure web application, the method comprising:

analyzing code, by a computing processor, associated with a web application to identify at least one security vulnerability related to a data entry field of the web application;

generating validation code, by the processor, to alleviate the security vulnerability, wherein said generating validation code comprises displaying identity of the at least one security vulnerability to a developer of the web application and displaying at least one validation routine, for selection by the developer, to be applied to the at least one security vulnerability;

inserting the validation code into the web application code to validate proper use of the data entry field associated with the security vulnerability, thereby alleviating the vulnerability;

checking, by the processor executing the inserted validation code, whether data entered into the data entry field conforms to a predetermined format; and

changing, by the processor executing the inserted validation code, the entered data that does not conform to the predetermined format to ensure conformity with the predetermined format.

2. The method of claim 1 , wherein the analyzing code associated with the web application comprises analyzing source code associated with the web application.

3. The method of claim 1 , wherein the analyzing code associated with the web application comprises performing a static analysis on binary code associated with the web application.

4. The method of claim 1 , further comprising providing, with the inserted validation code, a user interface to enable a developer of the web application to select a repair option for invalid data input entered into the data entry field.

5. The method of claim 1 , further comprising comparing the at least one security vulnerability to a vulnerability database to identify a recommended validation routine.

6. The method of claim 1 , further comprising automatically validating and remediating, with the inserted validation code, data entered into a plurality of data entry fields of the web application.

7. The method of claim 1 , further comprising validating, with the inserted validation code, the data entered into the data entry field by wrapping the data input in a validated object, the validated object precluding manipulation of a portion of the data, the portion comprising a plain text password.

8. A system for developing a secure web application, the system comprising:

a processor;

memory storing computer executable instructions that when executed by the processor cause the processor to:

analyze code associated with a web application to identify at least one security vulnerability related to a data entry field of the web application;

generate validation code to alleviate the security vulnerability, wherein generating validation code comprises displaying identity of the at least one security vulnerability to a developer of the web application and displaying at least one validation routine, for selection by the developer, to be applied to the at least one security vulnerability;

insert the validation code into the web application code to validate proper use of the data entry field associated with the security vulnerability, thereby alleviating the vulnerability;

check whether data entered into the data entry field conforms to a predetermined format; and

change the entered data that does not conform to the predetermined format to ensure conformity with the predetermined format.

9. The system of claim 8 , the processor further caused to scan source code associated with the web application to identify the vulnerable data entry fields.

10. The system of claim 8 , the processor further caused to provide an interactive wizard to selectively enable a developer of the web application to validate data entered into the vulnerable data entry fields.

11. The system of claim 10 , the interactive wizard selectively to provide a recommended validation routine for data entered into at least one of the vulnerable data entry fields to the developer.

12. The system of claim 8 , the processor further caused to validate data entered into the vulnerable data entry fields, the data received from a web application assessment tool.

13. The system of claim 8 , the processor further caused to wrap code associated with each vulnerable data entry field in a validation object.

14. A non-transitory computer-readable storage device comprising instructions that, when executed, cause one or more processors to:

analyze code associated with a web application to identify at least one security vulnerability related to a data entry field of the web application

generate validation code to alleviate the security vulnerability, wherein generating validation code comprises displaying identity of the at least one security vulnerability to a developer of the web application and displaying at least one validation routine, for selection by the developer, to be applied to the at least one security vulnerability;

insert the validation code into the web application code to validate proper use of the data entry field associated with the security vulnerability, thereby alleviating the vulnerability;

check whether data entered into the data entry field conforms to a predetermined format;

change the entered data that does not conform to the predetermined format to ensure conformity with the predetermined format.

15. The storage device of claim 14 , the one or more processors further caused to scan source code to identify said vulnerable data entry fields.

16. The storage device of claim 14 , the one or more processor further caused to analyze binary code to identify said vulnerable data entry fields.

17. The storage device of claim 14 , the one or more processors further caused to provide a user interface that enables a developer to select data entered into an individual identified vulnerable data entry field and a specific routine to validate the data.