Security is hard. As critical as it is to our collective work — and the internet as a whole — far too many of us don\u2019t have a solid grasp of addressing and avoiding vulnerabilities in our projects.<\/p>\n
This talk will bring up and explain several real world examples of common vulnerabilities and exploits that turn up in WordPress plugins and themes (Cross-Site Scripting, Timing Attacks, Cross-Site Request Forgeries, etc), detail some best practices to be used in their avoidance, and advise on how to respond when you learn of a vulnerability in a project you\u2019re maintaining.<\/p>\n
While this is a development-oriented talk, it will not get too deep into code — so while some familiarity with PHP would be nice, it\u2019s not a requirement.<\/p>\n","protected":false},"excerpt":{"rendered":"
Security is hard. As critical as it is to our collective work — and the internet as a whole — far too many of us don\u2019t have a solid grasp of addressing and avoiding vulnerabilities in our projects. This talk will bring up and explain several real world examples of common vulnerabilities and exploits that … Continue reading “Code Security Fundamentals”<\/span><\/a><\/p>\n","protected":false},"author":7045072,"featured_media":0,"template":"","meta":{"jetpack_post_was_ever_published":false,"_wcpt_session_time":1500062400,"_wcpt_session_duration":3000,"_wcpt_session_type":"session","_wcpt_session_slides":"","_wcpt_session_video":"","_wcpt_speaker_id":[450],"footnotes":""},"session_track":[5041,149451],"session_category":[],"class_list":["post-451","wcb_session","type-wcb_session","status-publish","hentry","wcb_track-developer","wcb_track-track-3"],"jetpack_shortlink":"https:\/\/wp.me\/p8gcWY-7h","jetpack_sharing_enabled":true,"session_date_time":{"date":"July 14, 2017","time":"4:00 pm"},"session_speakers":[{"id":"450","slug":"george-stephanis","name":"George Stephanis","link":"https:\/\/dc.wordcamp.org\/2017\/speaker\/george-stephanis\/"}],"session_cats_rendered":null,"_links":{"self":[{"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/sessions\/451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/sessions"}],"about":[{"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/types\/wcb_session"}],"version-history":[{"count":1,"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/sessions\/451\/revisions"}],"predecessor-version":[{"id":1576,"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/sessions\/451\/revisions\/1576"}],"speakers":[{"embeddable":true,"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/speakers\/450"}],"author":[{"embeddable":true,"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wporg\/v1\/users\/georgestephanis"}],"wp:attachment":[{"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/media?parent=451"}],"wp:term":[{"taxonomy":"wcb_track","embeddable":true,"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/session_track?post=451"},{"taxonomy":"wcb_session_category","embeddable":true,"href":"https:\/\/dc.wordcamp.org\/2017\/wp-json\/wp\/v2\/session_category?post=451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}