Add topic about best practices for writing secure code

[TravisEz13]

Prerequisites

• Existing Issue: Search the existing issues for this repository. If there is an issue that fits your needs do not file a new one. Subscribe, react, or comment on that issue instead.
• Descriptive Title: Write the title for this issue as a short synopsis. If possible, provide context. For example, "Document new Get-Foo cmdlet" instead of "New cmdlet."

PowerShell Version

7.4

Summary

We have two scenarios:

1. Writing secure code in general
   2. Don't rely on auto-loading
   3. Import the modules you use or use module qualified invocation
2. Writing code for Constrained Language Mode

Details

No response

Proposed Content Type

About Topic

Proposed Title

No response

Related Articles

• https://devblogs.microsoft.com/powershell/powershell-security-best-practices/
• https://learn.microsoft.com/en-us/mem/configmgr/apps/deploy-use/learn-script-security

[sdwheeler]

@TravisEz13 Do you have a draft you can share?

[sdwheeler]

We have some existing documentation:

• PowerShell security features
• Using Windows Defender Application Control
• Preventing script injection attacks