security-and-hardening

Input validation prevents injection attacks by enforcing strict checks on all external input before processing. This Skill requires treating external data as potentially hostile, validating formats, and adhering to OWASP Top 10 prevention patterns to ensure data integrity.

Secure user authentication and authorization requires robust access control and secure session management. This Skill guides proper password hashing, session cookie configuration with security flags, and strict authorization checks to protect user privacy.

Applying OWASP Top 10 prevention patterns to external integrations involves securing data transmission and treating external input as untrusted. This Skill enforces secure coding checklists to protect external data flows from common vulnerabilities.

Security headers protect web applications by enforcing policies like content security and transport-layer security. This Skill mandates configuring appropriate security headers as part of a security-first development approach to harden applications by default.

Secure sensitive data storage during user registration requires hashing passwords and protecting data at rest. This Skill ensures sensitive data is handled securely from storage to transmission, treating user information as sacred.

Yes, you can apply security and hardening best practices to existing user login modules. This Skill validates submitted data, secures password hashing, and configures session cookies regardless of the development stage.