Book/eBook | TCCD Study Guide - Chapter 08

Michael Schams

Beschreibung

Software security vulnerabilities have always been a hot topic and should be taken very seriously. The example questions in the chapter "Security" deal with the tasks and actions of the TYPO3 Security Team and some basic security and privacy related aspects that are important when developing TYPO3 extensions.

Skills

• About the TYPO3 Security Team
• Configuring Content Security Policy (CSP) in TYPO3
• Content Security Policy in Extensions
• Cross-Site Scripting (XSS)
• Cross-Site-Request-Forgery (CSRF)
• Backup Strategies
• Brute Force Hacking Passwords
• Cookies
• Distributed Denial of Service Attack (DDos) concept
• Handling Security Vulnerabilities
• Man-in-the-middle attack
• Multi-Factor Authentication (MFA) configuration
• Password Policies
• Prepared Statements
• Securing a TYPO3 installation
• Security best practices in TYPO3
• Understanding Content Security Policy (CSP)
• User Input in PHP Code
• User Input in DB Queries
• Web Vulnerability Types