Quality assurance in practice - coffee meeting, January, DIGIT
•Download as PPTX, PDF•
0 likes•295 views
The document discusses quality assurance procedures for subsites on the Next Europa WCMS. It notes that feature requests and module reviews are updated and feedback is provided by the maintenance team. Development then occurs either with a starterkit or custom solution, followed by delivery to a stash repository on feature branches. A QA procedure is then followed involving a playground deployment and eventual production deployment. The document concludes by thanking the audience and providing contact details for the author.
Report
Share
Report
Share
Recommended
Quality assurance in practice
Quality assurance (QA) helps improve projects by implementing standards, documentation, and clear workflows. The presenter discusses QA for the Next Europa WCMS project at the European Commission, which uses a standardized QA process and tools to validate subprojects. Various code quality and testing tools are presented, including PHP Mess Detector and PHPUnit. Drupal 8 focuses on cleaning up code based on coding standards through tools like PHP Code Sniffer and the deprecated Coder module.
Quality assurance in practice - brussels drupal meetup
This document discusses quality assurance practices for Drupal projects. It defines quality assurance and provides examples of tools that can be used, such as PHP Mess Detector and PHPUnit. It also discusses establishing standards, documentation, workflows and project management. The document outlines quality assurance processes for the Next Europa Drupal multisite project at the European Commission.
Taiko_Gauge_PPT
Taiko is a free and open source tool built on chrome-dev tools for browser automation and testing. It provides a REPL and integrates with test frameworks like Jest and Gauge. Taiko handles dynamic content and enables request stubbing, which sets it apart from other tools. Gauge is an open source test automation framework that works with Taiko for reliable browser testing across multiple programming languages.
Using JMeter Scripts in CloudTest for Continuous Testing
JMeter is popular with developers for creating tests that can be run easily during development. With the SOASTA CloudTest Spring release, it's easy to run JMeter tests in CloudTest from low-levels during development all the way to full scale load in production, with all of the great CloudTest features. Come learn how easy it is to shift-left and shift-right and make testing continuous.
عرض تقديمي
This document discusses the key features and functions of the social media platform Twitter, including signing up for an account, following and unfollowing other users, tweeting, direct messaging other users, and signing out of your account. The document encourages users to explore the various communication and sharing capabilities available through the Twitter platform.
Recommended
Quality assurance in practice
Quality assurance (QA) helps improve projects by implementing standards, documentation, and clear workflows. The presenter discusses QA for the Next Europa WCMS project at the European Commission, which uses a standardized QA process and tools to validate subprojects. Various code quality and testing tools are presented, including PHP Mess Detector and PHPUnit. Drupal 8 focuses on cleaning up code based on coding standards through tools like PHP Code Sniffer and the deprecated Coder module.
Quality assurance in practice - brussels drupal meetup
This document discusses quality assurance practices for Drupal projects. It defines quality assurance and provides examples of tools that can be used, such as PHP Mess Detector and PHPUnit. It also discusses establishing standards, documentation, workflows and project management. The document outlines quality assurance processes for the Next Europa Drupal multisite project at the European Commission.
Taiko_Gauge_PPT
Taiko is a free and open source tool built on chrome-dev tools for browser automation and testing. It provides a REPL and integrates with test frameworks like Jest and Gauge. Taiko handles dynamic content and enables request stubbing, which sets it apart from other tools. Gauge is an open source test automation framework that works with Taiko for reliable browser testing across multiple programming languages.
Using JMeter Scripts in CloudTest for Continuous Testing
JMeter is popular with developers for creating tests that can be run easily during development. With the SOASTA CloudTest Spring release, it's easy to run JMeter tests in CloudTest from low-levels during development all the way to full scale load in production, with all of the great CloudTest features. Come learn how easy it is to shift-left and shift-right and make testing continuous.
عرض تقديمي
This document discusses the key features and functions of the social media platform Twitter, including signing up for an account, following and unfollowing other users, tweeting, direct messaging other users, and signing out of your account. The document encourages users to explore the various communication and sharing capabilities available through the Twitter platform.
Blink
The document describes Blink, a band and mobile application that helps parents keep track of their children's locations both indoors and outdoors through GPS tracking, notifying parents if a child wanders out of a set range or if the band is removed from the child. The core value of Blink is to help take care of children and assist parents in doing so. The application allows parents to view their children's locations on maps, set meeting places, and send alerts to police if a child cannot be found.
Career Women
This article discusses challenges faced by women in advancing their careers, and profiles successful women project managers. It notes that while more women are entering the workforce, few reach leadership roles due to barriers like unclear promotion criteria and lack of support systems. Two women project managers provide insights. Prof. Karuna Jain emphasizes balancing career and family, and taking project-based work. Vandana Malaiya of IBM recommends having confidence, seeking help during tough times, and flexibility from employers. The article promotes creating support systems and equal opportunities to help more women succeed.
Pollution agenda project
The document outlines various ways an individual contributes to pollution throughout the day and proposes solutions to reduce that pollution. It discusses driving to school alone in an SUV, using plastic hangers and bottles, running the air conditioning excessively, driving unnecessarily between school and practice, fueling an inefficient truck, and using plastic utensils. Solutions proposed include carpooling, biking, using reusable bottles and wood hangers, adjusting the thermostat, limiting driving, fueling with bio-diesel, and using wooden utensils.
Real time projects
This document advertises Java training services from javaconceptz.com, a professional Java training centre. It provides their contact number and details about their banking project training program, which is intended to help students kick start their IT careers and find jobs. It encourages interested people to call 9535052050 for queries.
Android Introduction
This document provides an overview of Android including:
- Android is an open source operating system used primarily in smartphones and tablets.
- It allows developers to create applications using Java and distribute them through Google Play Store.
- The document describes key Android concepts like activities, services, sensors and permissions as well as Google services that can be integrated into apps.
- It also lists different Android devices like Nexus, Android Wear and Google Glass.
Business Process Re-Engineering
Fundamentally rethink how your building works in order to improve tenant service, cut operational costs, and become a world class competitor! This Presentation delivers essential tips for improving building processes to stay competitive in a buy and hold economy.
Presented by: Faraz Memon
What is Business Process Re-Engineering? Why is now the time to Re-Engineer your operations? How to find and locate operational areas to improve upon. The first steps to Re-Engineering your process & benchmarking. How to approach technology decisions & data migration. The best practices for Business Process Re-Engineering
Register to view presentation On-Demand:
http://be.buildingengines.com/Reg-Webinar-On-Demand-BusinessProcess-Reengineering.html
Shirley Temple: 7 Memorable Movie Roles
This document provides summaries for 7 memorable movie roles of Shirley Temple:
1. Little Miss Marker (1934) - Temple is left with a bookmaker by her father and takes to the bookies, though their ways start to rub off on her cheerful nature.
2. Curly Top (1935) - A wealthy man adopts two orphan sisters, and finds himself falling for the pretty older one.
3. The Littlest Rebel (1935) - Temple's rebel officer father tries to see his family during the Civil War and is arrested, so she and Bill Robinson beg President Lincoln to intervene.
4. Bright Eyes (1934) - An orphan is taken in by a rich family despite her av
Bawse legacy 1.5
Hailey proposes to her boyfriend Zack and he accepts. Meanwhile, Laura has begun hooking up with multiple guys at college. Dennis continues focusing on painting to earn money for the family rather than dating. Amanda tries to lose weight at her father's urging. The siblings live in a Greek house together as they attend college.
My version to share college updated friday april 20 updated
The survey gathered information from 107 respondents at a community college about the availability and affordability of healthy foods on campus. Key findings included:
- 59% of respondents were between 56-65 years old. 91% identified as students.
- 52% said nutritious foods were sometimes available, while 30% said they were rarely affordable compared to unhealthy options.
- The most common improvements respondents wanted to see were increased affordability (82%), availability (37%), and quality (34%) of foods.
- 38% felt the food environment sometimes supports healthy eating, while 35% felt it rarely does.
Ebook Vị giám đốc một phút và xây dựng nhóm làm việc hiệu quả - Ken planchard...
Để doanh nghiệp tồn tại bền vững và phát triển mạnh mẽ, các nhà quản lý không chỉ chú trọng các nhân viên chủ chốt của công ty mà còn phải có giải pháp giúp tận dụng trí lực và tiềm năng của mọi nhân viên ở các bộ phận khác nhau.
Theo đó, một cơ cấu mới đã ra đời: một tổ chức phải được xây dựng từ những nhóm làm việc với tinh thần tự chủ và tích cực, không ngừng phát huy sáng tạo và các kỹ năng cần thiết. Người được đánh giá là thuyền trưởng của con tàu doanh nghiệp chính là người lãnh đạo công ty phải là người tài trí đứng đầu, một thành viên hoạt động xông xáo trong nhóm nữa.
Intel’s social media marketing strategy
1) Intel was founded in 1968 and introduced the world's first microprocessor in 1971, growing to employ over 82,500 employees globally focused on advancing computing technology.
2) Intel aims to grow its PC and datacenter business, extend solutions to adjacent markets, create secure computing experiences, and care for people and the planet.
3) The presentation proposes using social media, search engine optimization, public relations, and sponsorship to improve Intel's image and propagate its developments to consumers.
Rừng Na Uy ebook - Murakami Haruki
Xuất bản lần đầu ở Nhật Bản năm 1987, Truyện Tiểu Thuyết Rừng Na Uy thực sự là một hiện tượng kỳ lạ với 4 triệu bản sách được bán ra, và theo thống kê hiện tại, cứ 7 người Nhật thì có 1 người đã đọc Rừng Na Uy. Tại Trung Quốc, Rừng Na Uy đã trở thành một hiện tượng văn hoá với hơn 1 triệu bản sách được tiêu thụ và được đánh giá là 1 trong 10 cuốn sách có ảnh hưởng lớn nhất ở đại lục trong thế kỷ 20.
Theo tờ Publisher Weekly, “đã hai mươi năm nay, Rừng Na Uy luôn nằm trong danh sách 10 tiểu thuyết được giới trẻ Nhật Bản và Hàn Quốc tìm đọc nhiều nhất”. - Publisher Weekly
Nắm bắt sự đam mê và gấp gấp của ái tình tuổi trẻ... Lặng lẽ lôi cuốn người đọc và cuối cùng lay động tam can. - Time Literary Supplement
Dịu dàng, quyến rũ như thơ, căng thẳng như bi kịch và gợi dục một cách mê đắm. Một cuốn tiểu thuyết kỳ diệu có âm hưởng hướng đạo và tự nguyện. Nhân vật chính yêu người yêu của người bạn thân nhất thời niên thiếu đã tự sát của mình. Nhưng một thời gian sau,a nh chàng cũng phải lòng một nữ sinh ở khoa mình... Tuyệt đối nên đọc. - SDM
How To Have Fun in Open Source - CMS Garden Unconference 2019
Slides of my community engagement talk in Essen, Germany at CMS Garden Unconference on 16 November 2019.
Software Development Weaknesses - SecOSdays Sofia, 2019
The OWASP Top 10 is a powerful awareness document for web application security, the latest version was released in 2017. It represents industry standards weaknesses that are the most critical ones in terms of their security risk.
In this talk we go into details of all its items, matching them with vulnerability types from the CWE (Common Weakness Enumeration) category system.
To understand the most common security issues and their consequences, one of the best ways is to learn about prevention.
Most of them can be remediated at a low cost if they are discovered during the development phase - in this session we're going to check Java, C, PHP, Perl and other programming languages in order to raise awareness for secure software development.
More Related Content
Viewers also liked
Blink
The document describes Blink, a band and mobile application that helps parents keep track of their children's locations both indoors and outdoors through GPS tracking, notifying parents if a child wanders out of a set range or if the band is removed from the child. The core value of Blink is to help take care of children and assist parents in doing so. The application allows parents to view their children's locations on maps, set meeting places, and send alerts to police if a child cannot be found.
Career Women
This article discusses challenges faced by women in advancing their careers, and profiles successful women project managers. It notes that while more women are entering the workforce, few reach leadership roles due to barriers like unclear promotion criteria and lack of support systems. Two women project managers provide insights. Prof. Karuna Jain emphasizes balancing career and family, and taking project-based work. Vandana Malaiya of IBM recommends having confidence, seeking help during tough times, and flexibility from employers. The article promotes creating support systems and equal opportunities to help more women succeed.
Pollution agenda project
The document outlines various ways an individual contributes to pollution throughout the day and proposes solutions to reduce that pollution. It discusses driving to school alone in an SUV, using plastic hangers and bottles, running the air conditioning excessively, driving unnecessarily between school and practice, fueling an inefficient truck, and using plastic utensils. Solutions proposed include carpooling, biking, using reusable bottles and wood hangers, adjusting the thermostat, limiting driving, fueling with bio-diesel, and using wooden utensils.
Real time projects
This document advertises Java training services from javaconceptz.com, a professional Java training centre. It provides their contact number and details about their banking project training program, which is intended to help students kick start their IT careers and find jobs. It encourages interested people to call 9535052050 for queries.
Android Introduction
This document provides an overview of Android including:
- Android is an open source operating system used primarily in smartphones and tablets.
- It allows developers to create applications using Java and distribute them through Google Play Store.
- The document describes key Android concepts like activities, services, sensors and permissions as well as Google services that can be integrated into apps.
- It also lists different Android devices like Nexus, Android Wear and Google Glass.
Business Process Re-Engineering
Fundamentally rethink how your building works in order to improve tenant service, cut operational costs, and become a world class competitor! This Presentation delivers essential tips for improving building processes to stay competitive in a buy and hold economy.
Presented by: Faraz Memon
What is Business Process Re-Engineering? Why is now the time to Re-Engineer your operations? How to find and locate operational areas to improve upon. The first steps to Re-Engineering your process & benchmarking. How to approach technology decisions & data migration. The best practices for Business Process Re-Engineering
Register to view presentation On-Demand:
http://be.buildingengines.com/Reg-Webinar-On-Demand-BusinessProcess-Reengineering.html
Shirley Temple: 7 Memorable Movie Roles
This document provides summaries for 7 memorable movie roles of Shirley Temple:
1. Little Miss Marker (1934) - Temple is left with a bookmaker by her father and takes to the bookies, though their ways start to rub off on her cheerful nature.
2. Curly Top (1935) - A wealthy man adopts two orphan sisters, and finds himself falling for the pretty older one.
3. The Littlest Rebel (1935) - Temple's rebel officer father tries to see his family during the Civil War and is arrested, so she and Bill Robinson beg President Lincoln to intervene.
4. Bright Eyes (1934) - An orphan is taken in by a rich family despite her av
Bawse legacy 1.5
Hailey proposes to her boyfriend Zack and he accepts. Meanwhile, Laura has begun hooking up with multiple guys at college. Dennis continues focusing on painting to earn money for the family rather than dating. Amanda tries to lose weight at her father's urging. The siblings live in a Greek house together as they attend college.
My version to share college updated friday april 20 updated
The survey gathered information from 107 respondents at a community college about the availability and affordability of healthy foods on campus. Key findings included:
- 59% of respondents were between 56-65 years old. 91% identified as students.
- 52% said nutritious foods were sometimes available, while 30% said they were rarely affordable compared to unhealthy options.
- The most common improvements respondents wanted to see were increased affordability (82%), availability (37%), and quality (34%) of foods.
- 38% felt the food environment sometimes supports healthy eating, while 35% felt it rarely does.
Ebook Vị giám đốc một phút và xây dựng nhóm làm việc hiệu quả - Ken planchard...
Để doanh nghiệp tồn tại bền vững và phát triển mạnh mẽ, các nhà quản lý không chỉ chú trọng các nhân viên chủ chốt của công ty mà còn phải có giải pháp giúp tận dụng trí lực và tiềm năng của mọi nhân viên ở các bộ phận khác nhau.
Theo đó, một cơ cấu mới đã ra đời: một tổ chức phải được xây dựng từ những nhóm làm việc với tinh thần tự chủ và tích cực, không ngừng phát huy sáng tạo và các kỹ năng cần thiết. Người được đánh giá là thuyền trưởng của con tàu doanh nghiệp chính là người lãnh đạo công ty phải là người tài trí đứng đầu, một thành viên hoạt động xông xáo trong nhóm nữa.
Intel’s social media marketing strategy
1) Intel was founded in 1968 and introduced the world's first microprocessor in 1971, growing to employ over 82,500 employees globally focused on advancing computing technology.
2) Intel aims to grow its PC and datacenter business, extend solutions to adjacent markets, create secure computing experiences, and care for people and the planet.
3) The presentation proposes using social media, search engine optimization, public relations, and sponsorship to improve Intel's image and propagate its developments to consumers.
Rừng Na Uy ebook - Murakami Haruki
Xuất bản lần đầu ở Nhật Bản năm 1987, Truyện Tiểu Thuyết Rừng Na Uy thực sự là một hiện tượng kỳ lạ với 4 triệu bản sách được bán ra, và theo thống kê hiện tại, cứ 7 người Nhật thì có 1 người đã đọc Rừng Na Uy. Tại Trung Quốc, Rừng Na Uy đã trở thành một hiện tượng văn hoá với hơn 1 triệu bản sách được tiêu thụ và được đánh giá là 1 trong 10 cuốn sách có ảnh hưởng lớn nhất ở đại lục trong thế kỷ 20.
Theo tờ Publisher Weekly, “đã hai mươi năm nay, Rừng Na Uy luôn nằm trong danh sách 10 tiểu thuyết được giới trẻ Nhật Bản và Hàn Quốc tìm đọc nhiều nhất”. - Publisher Weekly
Nắm bắt sự đam mê và gấp gấp của ái tình tuổi trẻ... Lặng lẽ lôi cuốn người đọc và cuối cùng lay động tam can. - Time Literary Supplement
Dịu dàng, quyến rũ như thơ, căng thẳng như bi kịch và gợi dục một cách mê đắm. Một cuốn tiểu thuyết kỳ diệu có âm hưởng hướng đạo và tự nguyện. Nhân vật chính yêu người yêu của người bạn thân nhất thời niên thiếu đã tự sát của mình. Nhưng một thời gian sau,a nh chàng cũng phải lòng một nữ sinh ở khoa mình... Tuyệt đối nên đọc. - SDM
Viewers also liked (20)
My version to share college updated friday april 20 updated
My version to share college updated friday april 20 updated
Ebook Vị giám đốc một phút và xây dựng nhóm làm việc hiệu quả - Ken planchard...
Ebook Vị giám đốc một phút và xây dựng nhóm làm việc hiệu quả - Ken planchard...
экологические основы природопользования гальперин м.в учебник_2003 -256с
экологические основы природопользования гальперин м.в учебник_2003 -256с
More from Balázs Tatár
How To Have Fun in Open Source - CMS Garden Unconference 2019
Slides of my community engagement talk in Essen, Germany at CMS Garden Unconference on 16 November 2019.
Software Development Weaknesses - SecOSdays Sofia, 2019
The OWASP Top 10 is a powerful awareness document for web application security, the latest version was released in 2017. It represents industry standards weaknesses that are the most critical ones in terms of their security risk.
In this talk we go into details of all its items, matching them with vulnerability types from the CWE (Common Weakness Enumeration) category system.
To understand the most common security issues and their consequences, one of the best ways is to learn about prevention.
Most of them can be remediated at a low cost if they are discovered during the development phase - in this session we're going to check Java, C, PHP, Perl and other programming languages in order to raise awareness for secure software development.
Security Awareness for Open Source Web Applications
This document discusses security awareness and practices. It begins by introducing Tatár Balázs János and his background in open source. It then discusses security awareness programs for employees, organizational security structures, and easy steps small businesses can take. Subsequent sections cover security issues as "bugs", planning security from the start of projects, thinking like attackers to test security, and key security principles. The document emphasizes that stakeholders understanding security basics is important and outlines various security assessment and review methods. It closes by discussing vulnerability management, trusted sources for fixes, and the TYPO3 security team and advisories.
Let's write secure Drupal code! DUG Belgium - 08/08/2019
Slides of my session called Let's write secure Drupal code! given at Drupal User Group Belgium in Ghent, Belgium on 8 August 2019.
Let's write secure drupal code! - Drupal Camp Pannonia 2019
The 'Let's write secure drupal code!' session's slides given in Palic, Serbia at Drupal Camp Pannonia 2019.
A bug's life - Decoupled Drupal Security and Vulnerability Management
The document discusses security concepts and best practices for software development. It covers topics like security awareness training, organizational security structures, vulnerability assessments, penetration testing, and the three pillars of security - confidentiality, integrity, and availability. Security is discussed across various stages of the development lifecycle from planning to ongoing maintenance.
A bug's life - Drupal Application Security and Vulnerability Management
The document discusses security awareness and vulnerability management. It describes the need for security policies and education programs within organizations. It also outlines various security assessment methods like vulnerability assessments, security audits, and penetration testing. Throughout, it uses metaphors relating to bugs and butterflies to illustrate different stages of the software development and security process.
Let's write secure Drupal code! - Drupal Camp Poland 2019
The document is a presentation by Tatar Balazs Janos on writing secure Drupal code. It provides an overview of the presenter's background and experience with Drupal security. The presentation covers trends in security, types of vulnerabilities like cross-site scripting and SQL injection, and techniques for protecting against vulnerabilities such as input filtering, automated testing, and access control. It includes code examples and opportunities for audience participation through a bingo game.
A bug's life - Drupal Application Security and Vulnerability Management
Tatar Balazs Janos gave a presentation on Drupal application security and vulnerability management. The presentation covered topics such as security awareness in the workplace, planning for security, web security best practices, security testing, vulnerability management, and risk assessment. The goal was to educate attendees on how to build security into the design, development, and maintenance of applications.
Let's write secure Drupal code! - DrupalCamp Kyiv 2019
The document is a presentation on writing secure Drupal code given by Tatar Balazs Janos at DrupalCamp Kyiv 2019. It introduces the speaker and their background working with Drupal security. It then covers trends in security, types of vulnerabilities like cross-site scripting and SQL injection, and methods for preventing vulnerabilities like sanitizing user input and using access control properly.
Let's write secure Drupal code! - DrupalCamp Belarus 2019
This document summarizes a presentation on writing secure Drupal code. The presenter, Tatar Balazs Janos, has worked with Drupal since 2007 and is active in the Drupal security community. The presentation covers trends in security vulnerabilities like cross-site scripting and SQL injection, demonstrates how to avoid vulnerabilities in code, and includes interactive exercises to test attendees' knowledge of secure coding best practices in Drupal.
Let's write secure Drupal code! - DrupalCamp Spain 2019
The document summarizes a presentation on writing secure Drupal code. It introduces the presenter Tatar Balazs Janos and his experience with Drupal. It then covers common types of vulnerabilities like cross-site scripting, access bypass, SQL injection and how to prevent them. Examples of vulnerable code are provided and improved upon. Best practices discussed include using database queries, input filtering, automated testing and restricting permissions.
DrupalCon Seattle 2019 - Mentoring Booth slides
This document advertises mentoring opportunities for contributing to Drupal at DrupalCon Seattle. It provides information on Birds of a Feather sessions, orientation sessions, workshops for first time contributors, and dedicated spaces for mentored and general contribution. It encourages people to get involved in different contributor roles and lists topics for contribution.
Let's write secure Drupal code! Drupal MountainCamp 2019
This document summarizes a presentation on secure Drupal coding given by Balazs Janos Tatar at the Drupal Mountain Camp 2019 conference. The presentation covered common types of vulnerabilities like cross-site scripting, access bypass, SQL injection, and discussed ways to prevent them, such as sanitizing user input, using the database API, and implementing access controls correctly. Code snippets were presented and the audience was asked to identify any issues. The goal was to help developers write more secure Drupal code.
Let's write secure Drupal code! - DrupalCamp London 2019
- The document discusses secure Drupal coding practices presented by Balazs Janos Tatar at DrupalCamp London 2019.
- It covers common vulnerabilities like cross-site scripting, access bypass, SQL injection and how to prevent them through input filtering, access control configuration, and using Drupal's database APIs.
- Tatar also discusses security improvements in Drupal 8 like Twig templates, automated CSRF protection, and content security policy compatibility. He encourages learning from security advisories and reviewing sites for vulnerabilities.
Everything You Always Wanted to Know About Drupal Security* (*But Were Afraid...
This document provides an overview of Drupal security from Balazs Janos Tatar, a security analyst for the European Commission. It discusses how Tatar got involved in security work, the Drupal Security Team's disclosure policy and process for security advisories. It also covers how risk is assessed for Drupal modules and lessons learned from past high profile vulnerabilities in Drupal core software. The presentation aims to help others understand Drupal security practices and processes.
Everything You Always Wanted to Know About Drupal Security (*But Were Afraid ...
Slides of the session, given in Essen, Germany at the annual Unkonferenz of CMS Garden where SecOSday got relocated on 17th November, 2018.
Let's write secure Drupal code! - DrupalCamp Oslo, 2018
This document summarizes a presentation about writing secure Drupal code. It discusses common vulnerabilities like cross-site scripting, access bypass, and SQL injection. It provides examples of secure and vulnerable code and recommends best practices to prevent vulnerabilities, including input filtering, access control, and automated testing. It also discusses security improvements in Drupal 8 and learning from security advisories.
Mentoring slides - Drupal Europe, Darmstadt, Germany 2018
This document provides information about Drupal Mentoring events at Drupal Europe, including contribution days on Mondays and Fridays, Birds of a Feather sessions on Tuesdays and Thursdays, and mentored contribution sessions throughout the week. It encourages contribution to Drupal in roles like translating, content strategy, project management, and marketing. Links are provided to resources on setting up a local development environment, a spreadsheet of contribution topics, and information for becoming a mentor.
Let's write secure Drupal code! - 13.09.2018 @ Drupal Europe, Darmstadt, Germany
This document summarizes a presentation on writing secure Drupal code. It discusses common vulnerabilities like cross-site scripting, access bypass, and SQL injection. It demonstrates how to securely code against these vulnerabilities and recommends using tools like Behat tests, security advisories, and contributing to Drupal to improve security. The presentation encourages writing secure code through sanitizing user input, using database placeholders, and following best practices.
More from Balázs Tatár (20)
How To Have Fun in Open Source - CMS Garden Unconference 2019
How To Have Fun in Open Source - CMS Garden Unconference 2019
Software Development Weaknesses - SecOSdays Sofia, 2019
Software Development Weaknesses - SecOSdays Sofia, 2019
Security Awareness for Open Source Web Applications
Security Awareness for Open Source Web Applications
Let's write secure Drupal code! DUG Belgium - 08/08/2019
Let's write secure Drupal code! DUG Belgium - 08/08/2019
Let's write secure drupal code! - Drupal Camp Pannonia 2019
Let's write secure drupal code! - Drupal Camp Pannonia 2019
A bug's life - Decoupled Drupal Security and Vulnerability Management
A bug's life - Decoupled Drupal Security and Vulnerability Management
A bug's life - Drupal Application Security and Vulnerability Management
A bug's life - Drupal Application Security and Vulnerability Management
Let's write secure Drupal code! - Drupal Camp Poland 2019
Let's write secure Drupal code! - Drupal Camp Poland 2019
A bug's life - Drupal Application Security and Vulnerability Management
A bug's life - Drupal Application Security and Vulnerability Management
Let's write secure Drupal code! - DrupalCamp Kyiv 2019
Let's write secure Drupal code! - DrupalCamp Kyiv 2019
Let's write secure Drupal code! - DrupalCamp Belarus 2019
Let's write secure Drupal code! - DrupalCamp Belarus 2019
Let's write secure Drupal code! - DrupalCamp Spain 2019
Let's write secure Drupal code! - DrupalCamp Spain 2019
Let's write secure Drupal code! Drupal MountainCamp 2019
Let's write secure Drupal code! Drupal MountainCamp 2019
Let's write secure Drupal code! - DrupalCamp London 2019
Let's write secure Drupal code! - DrupalCamp London 2019
Everything You Always Wanted to Know About Drupal Security* (*But Were Afraid...
Everything You Always Wanted to Know About Drupal Security* (*But Were Afraid...
Everything You Always Wanted to Know About Drupal Security (*But Were Afraid ...
Everything You Always Wanted to Know About Drupal Security (*But Were Afraid ...
Let's write secure Drupal code! - DrupalCamp Oslo, 2018
Let's write secure Drupal code! - DrupalCamp Oslo, 2018
Mentoring slides - Drupal Europe, Darmstadt, Germany 2018
Mentoring slides - Drupal Europe, Darmstadt, Germany 2018
Let's write secure Drupal code! - 13.09.2018 @ Drupal Europe, Darmstadt, Germany
Let's write secure Drupal code! - 13.09.2018 @ Drupal Europe, Darmstadt, Germany
Recently uploaded
Digital Banking in the Cloud: How Citizens Bank Unlocked Their Mainframe
Inconsistent user experience and siloed data, high costs, and changing customer expectations – Citizens Bank was experiencing these challenges while it was attempting to deliver a superior digital banking experience for its clients. Its core banking applications run on the mainframe and Citizens was using legacy utilities to get the critical mainframe data to feed customer-facing channels, like call centers, web, and mobile. Ultimately, this led to higher operating costs (MIPS), delayed response times, and longer time to market.
Ever-changing customer expectations demand more modern digital experiences, and the bank needed to find a solution that could provide real-time data to its customer channels with low latency and operating costs. Join this session to learn how Citizens is leveraging Precisely to replicate mainframe data to its customer channels and deliver on their “modern digital bank” experiences.
Apps Break Data
How information systems are built or acquired puts information, which is what they should be about, in a secondary place. Our language adapted accordingly, and we no longer talk about information systems but applications. Applications evolved in a way to break data into diverse fragments, tightly coupled with applications and expensive to integrate. The result is technical debt, which is re-paid by taking even bigger "loans", resulting in an ever-increasing technical debt. Software engineering and procurement practices work in sync with market forces to maintain this trend. This talk demonstrates how natural this situation is. The question is: can something be done to reverse the trend?
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Simplify your search for a reliable Python development partner! This list presents the top 10 trusted US providers offering comprehensive Python development services, ensuring your project's success from conception to completion.
HCL Notes and Domino License Cost Reduction in the World of DLAU
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-and-domino-license-cost-reduction-in-the-world-of-dlau/
The introduction of DLAU and the CCB & CCX licensing model caused quite a stir in the HCL community. As a Notes and Domino customer, you may have faced challenges with unexpected user counts and license costs. You probably have questions on how this new licensing approach works and how to benefit from it. Most importantly, you likely have budget constraints and want to save money where possible. Don’t worry, we can help with all of this!
We’ll show you how to fix common misconfigurations that cause higher-than-expected user counts, and how to identify accounts which you can deactivate to save money. There are also frequent patterns that can cause unnecessary cost, like using a person document instead of a mail-in for shared mailboxes. We’ll provide examples and solutions for those as well. And naturally we’ll explain the new licensing model.
Join HCL Ambassador Marc Thomas in this webinar with a special guest appearance from Franz Walder. It will give you the tools and know-how to stay on top of what is going on with Domino licensing. You will be able lower your cost through an optimized configuration and keep it low going forward.
These topics will be covered
- Reducing license cost by finding and fixing misconfigurations and superfluous accounts
- How do CCB and CCX licenses really work?
- Understanding the DLAU tool and how to best utilize it
- Tips for common problem areas, like team mailboxes, functional/test users, etc
- Practical examples and best practices to implement right away
Harnessing the Power of NLP and Knowledge Graphs for Opioid Research
Gursev Pirge, PhD
Senior Data Scientist - JohnSnowLabs
June Patch Tuesday
Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...
“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...Edge AI and Vision Alliance
For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/temporal-event-neural-networks-a-more-efficient-alternative-to-the-transformer-a-presentation-from-brainchip/
Chris Jones, Director of Product Management at BrainChip , presents the “Temporal Event Neural Networks: A More Efficient Alternative to the Transformer” tutorial at the May 2024 Embedded Vision Summit.
The expansion of AI services necessitates enhanced computational capabilities on edge devices. Temporal Event Neural Networks (TENNs), developed by BrainChip, represent a novel and highly efficient state-space network. TENNs demonstrate exceptional proficiency in handling multi-dimensional streaming data, facilitating advancements in object detection, action recognition, speech enhancement and language model/sequence generation. Through the utilization of polynomial-based continuous convolutions, TENNs streamline models, expedite training processes and significantly diminish memory requirements, achieving notable reductions of up to 50x in parameters and 5,000x in energy consumption compared to prevailing methodologies like transformers.
Integration with BrainChip’s Akida neuromorphic hardware IP further enhances TENNs’ capabilities, enabling the realization of highly capable, portable and passively cooled edge devices. This presentation delves into the technical innovations underlying TENNs, presents real-world benchmarks, and elucidates how this cutting-edge approach is positioned to revolutionize edge AI across diverse applications.GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
Tomaz Bratanic
Graph ML and GenAI Expert - Neo4j
Introduction of Cybersecurity with OSS at Code Europe 2024
I develop the Ruby programming language, RubyGems, and Bundler, which are package managers for Ruby. Today, I will introduce how to enhance the security of your application using open-source software (OSS) examples from Ruby and RubyGems.
The first topic is CVE (Common Vulnerabilities and Exposures). I have published CVEs many times. But what exactly is a CVE? I'll provide a basic understanding of CVEs and explain how to detect and handle vulnerabilities in OSS.
Next, let's discuss package managers. Package managers play a critical role in the OSS ecosystem. I'll explain how to manage library dependencies in your application.
I'll share insights into how the Ruby and RubyGems core team works to keep our ecosystem safe. By the end of this talk, you'll have a better understanding of how to safeguard your code.
Leveraging the Graph for Clinical Trials and Standards
Katja Glaß
OpenStudyBuilder Community Manager - Katja Glaß Consulting
Marius Conjeaud
Principal Consultant - Neo4j
Mutation Testing for Task-Oriented Chatbots
Conversational agents, or chatbots, are increasingly used to access all sorts of services using natural language. While open-domain chatbots - like ChatGPT - can converse on any topic, task-oriented chatbots - the focus of this paper - are designed for specific tasks, like booking a flight, obtaining customer support, or setting an appointment. Like any other software, task-oriented chatbots need to be properly tested, usually by defining and executing test scenarios (i.e., sequences of user-chatbot interactions). However, there is currently a lack of methods to quantify the completeness and strength of such test scenarios, which can lead to low-quality tests, and hence to buggy chatbots.
To fill this gap, we propose adapting mutation testing (MuT) for task-oriented chatbots. To this end, we introduce a set of mutation operators that emulate faults in chatbot designs, an architecture that enables MuT on chatbots built using heterogeneous technologies, and a practical realisation as an Eclipse plugin. Moreover, we evaluate the applicability, effectiveness and efficiency of our approach on open-source chatbots, with promising results.
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
At this talk we will discuss DDoS protection tools and best practices, discuss network architectures and what AWS has to offer. Also, we will look into one of the largest DDoS attacks on Ukrainian infrastructure that happened in February 2022. We'll see, what techniques helped to keep the web resources available for Ukrainians and how AWS improved DDoS protection for all customers based on Ukraine experience
Dandelion Hashtable: beyond billion requests per second on a commodity server
This slide deck presents DLHT, a concurrent in-memory hashtable. Despite efforts to optimize hashtables, that go as far as sacrificing core functionality, state-of-the-art designs still incur multiple memory accesses per request and block request processing in three cases. First, most hashtables block while waiting for data to be retrieved from memory. Second, open-addressing designs, which represent the current state-of-the-art, either cannot free index slots on deletes or must block all requests to do so. Third, index resizes block every request until all objects are copied to the new index. Defying folklore wisdom, DLHT forgoes open-addressing and adopts a fully-featured and memory-aware closed-addressing design based on bounded cache-line-chaining. This design offers lock-free index operations and deletes that free slots instantly, (2) completes most requests with a single memory access, (3) utilizes software prefetching to hide memory latencies, and (4) employs a novel non-blocking and parallel resizing. In a commodity server and a memory-resident workload, DLHT surpasses 1.6B requests per second and provides 3.5x (12x) the throughput of the state-of-the-art closed-addressing (open-addressing) resizable hashtable on Gets (Deletes).
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-und-domino-lizenzkostenreduzierung-in-der-welt-von-dlau/
DLAU und die Lizenzen nach dem CCB- und CCX-Modell sind für viele in der HCL-Community seit letztem Jahr ein heißes Thema. Als Notes- oder Domino-Kunde haben Sie vielleicht mit unerwartet hohen Benutzerzahlen und Lizenzgebühren zu kämpfen. Sie fragen sich vielleicht, wie diese neue Art der Lizenzierung funktioniert und welchen Nutzen sie Ihnen bringt. Vor allem wollen Sie sicherlich Ihr Budget einhalten und Kosten sparen, wo immer möglich. Das verstehen wir und wir möchten Ihnen dabei helfen!
Wir erklären Ihnen, wie Sie häufige Konfigurationsprobleme lösen können, die dazu führen können, dass mehr Benutzer gezählt werden als nötig, und wie Sie überflüssige oder ungenutzte Konten identifizieren und entfernen können, um Geld zu sparen. Es gibt auch einige Ansätze, die zu unnötigen Ausgaben führen können, z. B. wenn ein Personendokument anstelle eines Mail-Ins für geteilte Mailboxen verwendet wird. Wir zeigen Ihnen solche Fälle und deren Lösungen. Und natürlich erklären wir Ihnen das neue Lizenzmodell.
Nehmen Sie an diesem Webinar teil, bei dem HCL-Ambassador Marc Thomas und Gastredner Franz Walder Ihnen diese neue Welt näherbringen. Es vermittelt Ihnen die Tools und das Know-how, um den Überblick zu bewahren. Sie werden in der Lage sein, Ihre Kosten durch eine optimierte Domino-Konfiguration zu reduzieren und auch in Zukunft gering zu halten.
Diese Themen werden behandelt
- Reduzierung der Lizenzkosten durch Auffinden und Beheben von Fehlkonfigurationen und überflüssigen Konten
- Wie funktionieren CCB- und CCX-Lizenzen wirklich?
- Verstehen des DLAU-Tools und wie man es am besten nutzt
- Tipps für häufige Problembereiche, wie z. B. Team-Postfächer, Funktions-/Testbenutzer usw.
- Praxisbeispiele und Best Practices zum sofortigen Umsetzen
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
The typical problem in product engineering is not bad strategy, so much as “no strategy”. This leads to confusion, lack of motivation, and incoherent action. The next time you look for a strategy and find an empty space, instead of waiting for it to be filled, I will show you how to fill it in yourself. If you’re wrong, it forces a correction. If you’re right, it helps create focus. I’ll share how I’ve approached this in the past, both what works and lessons for what didn’t work so well.
"Choosing proper type of scaling", Olena Syrota
Imagine an IoT processing system that is already quite mature and production-ready and for which client coverage is growing and scaling and performance aspects are life and death questions. The system has Redis, MongoDB, and stream processing based on ksqldb. In this talk, firstly, we will analyze scaling approaches and then select the proper ones for our system.
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency.
During the hour, we’ll take you through:
Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board.
Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes.
Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI.
We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI.
This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!
Recently uploaded (20)
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Deep Dive: AI-Powered Marketing to Get More Leads and Customers with HyperGro...
Digital Banking in the Cloud: How Citizens Bank Unlocked Their Mainframe
Digital Banking in the Cloud: How Citizens Bank Unlocked Their Mainframe
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
HCL Notes and Domino License Cost Reduction in the World of DLAU
HCL Notes and Domino License Cost Reduction in the World of DLAU
Harnessing the Power of NLP and Knowledge Graphs for Opioid Research
Harnessing the Power of NLP and Knowledge Graphs for Opioid Research
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...
“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
Introduction of Cybersecurity with OSS at Code Europe 2024
Introduction of Cybersecurity with OSS at Code Europe 2024
Leveraging the Graph for Clinical Trials and Standards
Leveraging the Graph for Clinical Trials and Standards
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
Dandelion Hashtable: beyond billion requests per second on a commodity server
Dandelion Hashtable: beyond billion requests per second on a commodity server
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Quality assurance in practice - coffee meeting, January, DIGIT
- 1. Quality Assurance in practice TATAR Balazs Janos DIGIT A3 Coffee Meeting – January, 2016
- 6. PHPCS
- 7. Subsites in Next Europa WCMS • - (Updated) Feature requests + Module reviews • - Feedback by FPFIS (Maintenance Team) • - Development (starterkit or custom solution) • - Delivery in Stash (feature branches) • - QA procedure • - Playground deployment • - Production deployment
- 8. Thank you! • TATAR Balazs Janos • European Commission, DIGIT • Brussels, Belgium • tatarbj@gmail.com • @tatarbj
Editor's Notes
- PMs hate us. -> we block the deadlines Developers hate us. -> more issue then they expected. Client hate us. -> need to put more money to the project because of us.
- Small steps for the lifelong learning
- Long term goals: do not worry, they will realise they actually love you and your reports.
- QA tools: IDE (phpstorm, netbeans) Static code analysis (php mess detector, phpcs, phpdox) Testing (phpunit, behat) Deployment (jenkins, continuousphp) Human part (you) Phpunit/simpletest – unit testing Behat – behaviour driven testing Php mess detector – scan for possible bugs, suboptimal code, overcomplicated expression and my favourite one: dead code. Php copy/paste detector – duplicated code Phpdox – documentation generator phpcs&cbf Phpmetrics – complexity, volume, oo, maintainability, halstead complexity measures.