This talk introduces the main security pitfalls that every developer needs to know about before writing and shipping code.

A recent non-official proposal of OWASP top 10 helps us better understand what weaknesses our contemporary systems face and how we can manage our daily job to avoid them. The new candidate, SSRF (Server-side Request Forgery), will also be highlighted in more detail.

What you will learn:

• What are the biggest mistakes we make while writing and shipping code?
• Why is OWASP top 10 relevant for our daily jobs?
• How can we avoid the most critical vulnerabilities?