DrupalCon Amsterdam 2019: Find security vulnerabilities through code review

This talk, presented by Klaus Purer from Jobiqo in Vienna, Austria, focuses on writing secure code within Drupal applications, highlighting the multitude of security vulnerabilities developers might encounter. The speaker discusses practical strategies for identifying common mistakes made when developing Drupal modules, including areas to inspect first and specific security issues such as XSS, CSRF, SQL injection, and access bypass vulnerabilities. By referencing the OWASP Top Ten security vulnerabilities, Klaus shares insights from his extensive experience reviewing over a thousand modules on drupal.org, offering valuable tips for effective code review and vulnerability mitigation in Drupal development.