Security Doesn’t Have To Be a Nightmare
summary
Five concrete moves: sanitize inputs to prevent XSS and RCE, validate all fields before saving to stop SQL injection and corrupt data, and never keep credentials in repos—use secret stores like AWS Secrets Manager or Vault. Add automated SAST/DAST scanners in CI (Detectify, Polaris examples) for instant PR feedback. Use the CIA triad—ask how confidentiality, integrity, and availability can break for each user story—and shift security left so fixes stay cheap.
AI-written summary · about
chapters (6)
- 0:00Start
- 4:00SANITIZE THE INPUT
- 5:13VALIDATE THE DATA
- 6:15NO CREDENTIALS IN YOUR REPO
- 9:18LET THE MACHINES WORK FOR YOU
- 24:25SHIFT SECURITY LEFT
related talks
37mSecurity Doesn't Have To Be a Nightmare
23mSecurity Doesn't Have To Be a Nightmare
19mCritical Security Mistakes in Frontend Applications
29mSecurity by(e) Design?
30mWeb Security Engineering - Protect all layers of your project
52mContinuous Security
01h 01mSecurity: From basic principles to PHP specifics
01h 03mBe your own Threatbuster!