Learn PowerShell Core 6.0

Secure coding

In previous chapters, you have already read about best practices for writing PowerShell code. In addition, we will add some more advice here. These will be things that most software developers learn very early in their career, but as you know, PowerShell users are very rarely real software developers. Most PowerShell users actually come from the operations area and are trying to automate operational tasks. The following practices are described by the Open Web Application Security Project (OWASP) and include, in our opinion, the most important topics:

• Input validation
• Output encoding
• Authentication and password management 
• Session management
• Access control
• Cryptographic practices
• Error handling and logging
• Data protection