Prologue

• Code of conduct
• Help and communication
  • Forums
  • IRC channels
  • Maintainers
• Bugtracker
• Development process
  • The labels
  • Reviewing considered impossible?
  • Other labels
  • Milestones equal releases
• Security guidelines
  • SQL injection
  • Cross site scripting
  • Clickjacking
  • Code executions / file inclusions
  • Directory traversal
  • Shell injection
  • Auth bypass / privilege escalations
  • Sensitive data exposure
  • Cross site request forgery
  • Unvalidated redirects
  • Getting help