{"id":1510,"date":"2016-03-03T09:19:44","date_gmt":"2016-03-03T14:19:44","guid":{"rendered":"https:\/\/2016.lancasterpa.wordcamp.org\/?post_type=wcb_session&#038;p=1510"},"modified":"2016-04-08T16:47:31","modified_gmt":"2016-04-08T21:47:31","slug":"understanding-security-holes","status":"publish","type":"wcb_session","link":"https:\/\/lancasterpa.wordcamp.org\/2016\/session\/understanding-security-holes\/","title":{"rendered":"Understanding Security Holes"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-1514 size-medium\" src=\"https:\/\/2016.lancasterpa.wordcamp.org\/files\/2016\/03\/understanding-sec-holes-300x151.jpg\" alt=\"understanding-sec-holes\" width=\"300\" height=\"151\" srcset=\"https:\/\/lancasterpa.wordcamp.org\/2016\/files\/2016\/03\/understanding-sec-holes-300x151.jpg 300w, https:\/\/lancasterpa.wordcamp.org\/2016\/files\/2016\/03\/understanding-sec-holes-500x251.jpg 500w, https:\/\/lancasterpa.wordcamp.org\/2016\/files\/2016\/03\/understanding-sec-holes-624x313.jpg 624w, https:\/\/lancasterpa.wordcamp.org\/2016\/files\/2016\/03\/understanding-sec-holes.jpg 1024w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><br \/>\nSecurity is hard. Over the last few months there have been a number of high-profile plugin security vulnerabilities, but there is surprisingly little familiarity in the developer community when it comes to properly evaluating and remedying issues when they are discovered.<\/p>\n<p>In this talk, we\u2019ll be explaining in basic terms how several types of vulnerabilities work (including Cross-Site Scripting (XSS), SQL Injection (SQLI), Cross-Site Request Forgeries (CSRF), and Clickjacking, see what can be done to defend against them, and what to do when you have a vulnerability reported to you.<\/p>\n<p><strong>Please Note:<\/strong> This is a <em>development-oriented<\/em> talk, but will not get <em>too<\/em> deep into code.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security is hard. Over the last few months there have been a number of high-profile plugin security vulnerabilities, but there is surprisingly little familiarity in the developer community when it comes to properly evaluating and remedying issues when they are discovered. In this talk, we\u2019ll be explaining in basic terms how several types of vulnerabilities [&hellip;]<\/p>\n","protected":false},"author":7045072,"featured_media":0,"template":"","meta":{"jetpack_post_was_ever_published":false,"_wcpt_session_time":1457192700,"_wcpt_session_duration":3000,"_wcpt_session_type":"session","_wcpt_session_slides":"https:\/\/cloudup.com\/i_4plvb4A2B","_wcpt_session_video":"","_wcpt_speaker_id":[1508],"footnotes":""},"session_track":[366453],"session_category":[],"class_list":["post-1510","wcb_session","type-wcb_session","status-publish","hentry","wcb_track-queen-street"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6xYuZ-om","session_date_time":{"date":"March 5, 2016","time":"10:45 am"},"session_speakers":[{"id":"1508","slug":"george-stephanis","name":"George Stephanis","link":"https:\/\/lancasterpa.wordcamp.org\/2016\/speaker\/george-stephanis\/"}],"session_cats_rendered":null,"_links":{"self":[{"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/sessions\/1510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/sessions"}],"about":[{"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/types\/wcb_session"}],"author":[{"embeddable":true,"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/users\/7045072"}],"version-history":[{"count":4,"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/sessions\/1510\/revisions"}],"predecessor-version":[{"id":1567,"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/sessions\/1510\/revisions\/1567"}],"speakers":[{"embeddable":true,"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/speakers\/1508"}],"wp:attachment":[{"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/media?parent=1510"}],"wp:term":[{"taxonomy":"wcb_track","embeddable":true,"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/session_track?post=1510"},{"taxonomy":"wcb_session_category","embeddable":true,"href":"https:\/\/lancasterpa.wordcamp.org\/2016\/wp-json\/wp\/v2\/session_category?post=1510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}