Passa al contenuto
Tutte le presentazioni
  • Odoo Experience 2020
  • Presentazioni
  • Espositori
  • Programma
  • Tutti gli eventi
  • Odoo Experience 2020
  • Tutte le presentazioni
 
  • Odoo Experience 2020
  • Presentazioni
  • Espositori
  • Programma


  • Presentazioni
  • Keynote - Vision & Strategy
    Fabien Pinckaers
    Completata
  • Opening Keynote - Unveiling Odoo 14
    Fabien Pinckaers
    Completata
  • Odoo Website: How to Develop Building Blocks
    Samuel Degueldre
    Completata
  • Owl: The New Odoo UI Framework
    Géry Debongnie
    Completata
  • Odoo.sh for Project Managers & Developers
    Denis Vermylen
    Completata
  • Common Performance Pitfalls in Odoo Apps
    Nicolas Seinlet
    Completata
  • Odoo's Test Framework: Learn Best Practices
    Raphael Collet
    Completata
  • An In-depth Journey into Odoo's ORM
    Raphael Collet
    Completata
  • Empower Your App by Inheriting from Odoo Mixins
    Thibault Delavallée
    Completata
  • Tutorial: Develop an App with the Odoo Framework
    Yannick Tivisse
    Completata
Caricamento del video in corso...
Security: Odoo Code Hardening
Developer Talk
Luogo: Studio 5 - 30/09/20, 20:30 - 30/09/20, 21:30 (Europe/Brussels) (1 ora)
Partecipa al quiz
Security: Odoo Code Hardening
Olivier Dony
Platform & Security at Odoo
Olivier Dony
Platform & Security at Odoo

Olivier joined the Odoo team in 2009. As an R&D engineer, he is specialized in the technical aspects of the Odoo framework, the stability of the overall product, and all performance aspects. He has also a key role in the Odoo Cloud team, designing and running the Odoo SaaS platform. He created the Odoo Security team, which puts him in a good position to act as the data protection specialist in the context of GDPR. He also follows the activities of the global Odoo Community, helping and connecting contributors with the Odoo team.



Security is vital and difficult. Lately, keeping web applications secure has been an incredibly difficult task in the face of the ever-increasing diversity of software security problems.

With this talk, developers will learn hints of best practices to ensure the security of their Odoo code and avoid common pitfalls. Based on the famous OWASP Top 10, and a history of security training given to Odoo R&D, this presentation will attempt to cover the most common security bugs found in Odoo apps, describing how they work, their impact, and how to detect and fix them during code reviews.

Join us!

Prerequisite: some development experience, not necessarily in Odoo, but ideally in Python and/or Javascript. The principles will be introduced, but there will also be specific code analysis examples.

Quiz

What are the most commonly found OWASP Top 10 issues in Odoo code?
SQL Injections and XSS Missing Logging and XSS Broken Access Control and XSS
What new security feature comes with Odoo 14?
An auth="public" mode for controller routes ; A password generator for the database manager ; A "t-esc" directive for escaping text values.
What can go wrong if a student name is "Robert '); DROP TABLE students;"?
It might cause a XSS if sent to the browser without proper escaping. It might destroy data if used in a database query without proper escaping. Both A and B
Biglietti
Listino prezzi: US: North America Listino prezzi

Odoo Experience on YouTube

1. Use the live chat to ask your questions.
2. The operator answers within a few minutes.

Live support on Youtube
Watch now