21.5. Writing Secure Scripts

As you’ve seen, the PowerShell team has been careful in designing the various security features in the PowerShell runtime. In the end, though, the whole point of Power-Shell is to allow people to create and run scripts that will automate system administration tasks. As a consequence, vulnerable or badly written scripts could inadvertently lead to substantial damage to the system. All the security features in the world can’t defend you from badly written scripts, so we’re going to look at some of the techniques you can use to make your code more secure.

In fact, we (the PowerShell team) have been described as obsessive in our security focus. Here’s a quote from Microsoft security guru Michael Howard: