Prologue

• Code of conduct
• Help and communication
  • Forums
  • Maintainers
• Bugtracker
• Security guidelines
  • SQL injection
  • Cross site scripting
  • Clickjacking
  • Code executions / file inclusions
  • Directory traversal
  • Shell injection
  • Auth bypass / privilege escalations
  • Sensitive data exposure
  • Cross site request forgery
  • Unvalidated redirects
  • Getting help
• Compatibility with the app ecosystem
  • Documentation procedures of changes that affect app developers