Ending Injection Vulnerabilities - Craig Francis скачать в хорошем качестве

Ending Injection Vulnerabilities - Craig Francis

Speaker Craig Francis Code Poets Limited, Developer Description How programming languages can bring an end to Injection Vulnerabilities, by "distinguishing strings from a trusted developer, from strings that may be attacker controlled". This simple distinction will allow libraries to ensure Injection Vulnerabilities are not possible, because those sensitive values (e.g. SQL, HTML, CLI strings) cannot contain user values. Instead, it will be up to the well-tested libraries to handle user values; ideally via parameterised queries, but they can also use appropriate escaping. Managed by the OWASP® Foundation https://owasp.org/