ivangrynenko-cursorrules-drupal

SQL injection vulnerabilities in Drupal occur when user input reaches database queries without parameterization. Use parameterized queries with Drupal's database API, prepared statements, and placeholders to prevent injection attacks. This skill audits your code against OWASP Top 10 patterns to catch these flaws before production.

Authentication failures and broken access control are OWASP Top 10 risks in Drupal. Check for weak password policies, missing permission checks, insecure token handling, and improper role enforcement. This skill provides patterns to audit authentication mechanisms, access control logic, and cryptographic implementations across core, contributed, and custom modules.

Yes. This skill integrates with code review and CI checks using Cursor Rules to enforce OWASP security patterns automatically. It supports continuous security hardening workflows, scanning Drupal core, contributed modules, and custom extensions for vulnerabilities before deployment.

Server-side request forgery and injection attacks require input validation, allowlisting, and secure API usage. This skill covers injection prevention, SSRF mitigation, cryptographic failures, and secure design patterns. It provides actionable guidance on secure database APIs, configuration hardening, and dependency management.

Security misconfiguration includes weak file permissions, insecure database settings, and unprotected credentials. This skill audits configuration security, logging, and software integrity across your Drupal stack, offering best practices for hardening settings and preventing common deployment flaws.

Yes. This skill applies OWASP Top 10 security patterns to Drupal core, contributed modules, and custom extensions equally. It covers authentication, access control, injection prevention, cryptography, configuration, and dependency security across your entire Drupal codebase.