Security

Security and Drupal, or on trusting the NSA

The US National Security Agency has recently released a list of the top 25 dangerous coding errors which lead to security vulnerabilities, which includes such items as improper input validation, improper encoding or escaping of output, and cross-site request forgery. While I'd highly recommend reading the list for anyone writing code that will be used on a website accessible by the public, nothing on it should come as a surprise to any experienced programmer working in this field.

Syndicate content