DrupalCon Amsterdam 2019: OWASP Top 10: What are them and how to prevent them

This talk presented by Ayesh Karunaratne focuses on web application security through the lens of the OWASP Top 10 vulnerabilities. The session discusses common attack types, their prevention strategies, and relevant statistics, primarily using the PHP language as a framework while also touching on broader security principles applicable to various languages. The speaker examines built-in protection mechanisms in content management systems like Drupal and WordPress, specifically how they mitigate threats such as XSS and CSRF. The discussion also addresses recent vulnerabilities, the failures that led to them, and the rationale behind the fixes. While attendees will not become security experts, they will gain awareness of key vulnerabilities and strategies for prevention across different platforms.