Ir al contenido
Todas las pláticas
  • Odoo Experience 2020
  • Charlas
  • Expositores
  • Agenda
  • Todos los eventos
  • Odoo Experience 2020
  • Todas las pláticas
 
  • Odoo Experience 2020
  • Charlas
  • Expositores
  • Agenda


  • Charlas
  • Keynote - Vision & Strategy
    Fabien Pinckaers
    Hecho
  • Opening Keynote - Unveiling Odoo 14
    Fabien Pinckaers
    Hecho
  • Why Browser Debugger is a Developer's Best Friend
    Loan Sens
    Hecho
  • Tutorial: Develop an App with the Odoo Framework
    Yannick Tivisse
    Hecho
  • Owl: The New Odoo UI Framework
    Géry Debongnie
    Hecho
  • Developing New Widgets for Your Views in Owl
    Géry Debongnie
    Hecho
  • Deploying & Scaling your Odoo Server
    Nicolas Seinlet
    Hecho
  • Odoo.sh for Project Managers & Developers
    Denis Vermylen
    Hecho
  • Odoo Website: How to Develop Building Blocks
    Samuel Degueldre
    Hecho
  • Empower Your App by Inheriting from Odoo Mixins
    Thibault Delavallée
    Hecho
Cargando vídeo...
Security: Odoo Code Hardening
Developer Talk
Ubicación: Studio 5 - 30/9/20, 20:30 - 30/9/20, 21:30 (Europe/Brussels) (1 hora)
Haga la prueba
Security: Odoo Code Hardening
Olivier Dony
Platform & Security at Odoo
Olivier Dony
Platform & Security at Odoo

Olivier joined the Odoo team in 2009. As an R&D engineer, he is specialized in the technical aspects of the Odoo framework, the stability of the overall product, and all performance aspects. He has also a key role in the Odoo Cloud team, designing and running the Odoo SaaS platform. He created the Odoo Security team, which puts him in a good position to act as the data protection specialist in the context of GDPR. He also follows the activities of the global Odoo Community, helping and connecting contributors with the Odoo team.



Security is vital and difficult. Lately, keeping web applications secure has been an incredibly difficult task in the face of the ever-increasing diversity of software security problems.

With this talk, developers will learn hints of best practices to ensure the security of their Odoo code and avoid common pitfalls. Based on the famous OWASP Top 10, and a history of security training given to Odoo R&D, this presentation will attempt to cover the most common security bugs found in Odoo apps, describing how they work, their impact, and how to detect and fix them during code reviews.

Join us!

Prerequisite: some development experience, not necessarily in Odoo, but ideally in Python and/or Javascript. The principles will be introduced, but there will also be specific code analysis examples.

Cuestionario

What are the most commonly found OWASP Top 10 issues in Odoo code?
SQL Injections and XSS Missing Logging and XSS Broken Access Control and XSS
What new security feature comes with Odoo 14?
An auth="public" mode for controller routes ; A password generator for the database manager ; A "t-esc" directive for escaping text values.
What can go wrong if a student name is "Robert '); DROP TABLE students;"?
It might cause a XSS if sent to the browser without proper escaping. It might destroy data if used in a database query without proper escaping. Both A and B
Entradas
Lista de precios: US: North America Lista de precios

Odoo Experience on YouTube

1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.

Live support on Youtube
Watch now