Advertisement
Check these out next
Preventing Common Security Vulnerabilities
Mar. 2, 2023•0 likes•38 views
0 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Download to read offline
Report
Technology
Earlier this year, we looked at the theory behind developing WordPress plugins and themes securely. We covered how to develop a security mindset, and the guiding principles of secure development, and looked at the five examples of these principles, Sanitizing Data, Validating Data, Escaping Data, Nonces, and User Roles and Capabilities. In this session, we will look at how these principles are applied in real-world examples, by understanding common security vulnerabilities, how they can be exploited by would-be attackers, and what you can do to prevent them.
Jonathan BossengerFollow
Code instructor/ex-developer at AutomatticAdvertisement
Advertisement
Advertisement
Recommended
WordPress Plugin SecurityJonathan Bossenger
Debugging in WordPressJonathan Bossenger
Let's code: custom content & custom capabilitiesJonathan Bossenger
Developing for multisiteJonathan Bossenger
Developing Blocks without React - Block Supports.pptxJonathan Bossenger
Let's code: developing WordPress User Roles and CapabilitiesJonathan Bossenger
Preventing Common Security Vulnerabilities
- Jonathan Bossenger Let’s Code Learn.WordPress.org Preventing Common Security Vulnerabilities
- 2 👋🏽 Welcome! As you join, please make sure you have your local development environment ready: • A local WordPress installation • A code editor like VSCode or Sublime • An insecure plugin • https://github.com/jonathanbossenger/wp- learn-plugin- security/releases/download/1.0.0/wp-learn- plugin-security.1.0.0.zip Then, let everyone know in the chat where you’re joining us from… Hello! ○ My name is Jonathan Bossenger ○ From Cape Town, South Africa ○ Developer educator at Automattic ○ Sponsored to work with the Training Team ○ jonathanbossenger.com
- Learn.WordPress.org Let's code! Preventing Common Security Vulnerabilities Jonathan Bossenger
- Announcements ○ Welcome, and thanks for joining! ○ Please let me know if you can’t see this slide! ○ We are presenting in focus mode, but please feel free to enable your video. ○ You are welcome to ask questions. ○ You are welcome to post questions in the chat, or unmute to ask questions.
- Announcements ○ Make sure your local install is ready ○ https://github.com/jonathanbossenger/wp-learn-plugin- security/releases/download/1.0.0/wp-learn-plugin-security.1.0.0.zip ○ If I am going too fast, please let me know! ○ We will be posting this session to https://wordpress.tv/ afterwards ○ For more WordPress focused content please visit https://learn.wordpress.org/
- Learning Outcomes 1. Review common vulnerabilities - OWASP 2. Preventing common vulnerabilities • SQL Injection • Cross Site Scripting (XSS) • Cross-site Request Forgery (CSRF) • Broken Access Control 3. Bonus round 4. Where to go to learn more
- Objectives 1 1. Setup and review the insecure plugin 2. Prevent any possible SQL injections 3. Prevent any possible XSS vulnerabilities 4. Prevent any possible CSRF vulnerabilities 5. Find the bonus security vulnerability 7
- 8 Let’s code.
- Resources ○ https://github.com/jonathanbossenger/wp-learn-plugin-security/releases/download/1.0.0/wp-learn- plugin-security.1.0.0.zip ○ https://developer.wordpress.org/plugins/security/ ○ https://developer.wordpress.org/apis/security/ ○ https://owasp.org/www-project-top-ten/
Editor's Notes
- TITLE SLIDE: Make a copy of this presentation to your Google Drive, and edit to replace with your details.
Advertisement