Ending Injection Vulnerabilities

Ending Injection Vulnerabilities

Learn how programming languages can eliminate injection vulnerabilities in this 48-minute OWASP Foundation conference talk. Explore the concept of distinguishing trusted developer strings from potentially attacker-controlled strings, and discover how this simple distinction enables libraries to prevent injection vulnerabilities. Understand the role of well-tested libraries in handling user values through parameterized queries or appropriate escaping techniques. Gain insights from developer Craig Francis of Code Poets Limited on enhancing application security and protecting against common attack vectors.