best-practices

To enforce Content Security Policy and secure headers for web development, configure HTTPS enforcement, set robust CSP rules, implement security headers, and enable secure cookie handling to protect against common vulnerabilities like mixed content.

The best way to audit web dependencies and sanitize user input is to perform routine dependency auditing for known vulnerabilities and apply strict input sanitization techniques across all data entry points to prevent injection attacks.

To ensure browser compatibility, declare a proper Doctype, set character encoding, configure the viewport, use feature detection, apply polyfills, and avoid deprecated APIs to support a broad range of browsers effectively.

Yes, non-blocking resource loading and passive event listeners improve web performance by preventing render-blocking resources and enabling smooth scrolling, alongside utilizing event delegation and efficient memory management.

Yes, this skill can review semantic HTML and image aspect ratios to elevate code quality, ensuring proper document structure and preventing visual layout shifts to improve the overall user experience.

Error handling and source map configuration matter for web application security because proper error management prevents sensitive data leakage, while secure source map configuration avoids exposing original source code to malicious actors.