[documentation] [Documentation feature] Security Documentation

[Colin Brumelle]

Issue status update for 
http://drupal.org/node/59550
Post a follow up: 
http://drupal.org/project/comments/add/59550

 Project:      Documentation
 Version:      <none>
 Component:    Developer Guide
 Category:     feature requests
 Priority:     normal
 Assigned to:  Anonymous
 Reported by:  Colin Brumelle
 Updated by:   Colin Brumelle
 Status:       active

I think it would be useful to have some documentation that describes
Drupal's security model. It would be great to have a place to point
people to where they can find out about how Drupal handles and/or
enforces items like user permissions, data validation (and XSS
exploits), SQL injection, session hijacking and the like. Any security
minded folk want to take crack at describing how Drupal works to keep
you safe on this level?




Colin Brumelle