security-and-hardening

Code hardening prevents vulnerabilities by enforcing security-first development practices, including user input sanitization, secure authentication, and safe data handling. You apply a comprehensive checklist to secure cookies, headers, and session management against attacks.

Validating user input prevents SQL injection and XSS by sanitizing data before processing. This Skill demonstrates specific techniques to sanitize incoming requests, ensuring malicious payloads are neutralized before interacting with your application's data layer or rendering on the frontend.

Configuring CORS and environment variables secures API integration by restricting cross-origin access and protecting sensitive credentials. This Skill provides specific DaaS security guidance to ensure your external service integrations do not expose unauthorized endpoints.

A security review checklist verifies authentication, authorization, input validation, and data handling mechanisms. It ensures proper password handling, secure session management, and correct implementation of security headers to identify and close common vulnerability gaps.

Secure session management protects user authentication states from hijacking and fixation. By enforcing secure cookies and proper session handling rules, this Skill ensures that authenticated user states are maintained safely across web application requests without exposing credentials.

Common security pitfalls include rationalizing weak input validation and ignoring data handling protocols. This Skill highlights typical red flags to help developers avoid security misconfigurations and verify that protective measures are correctly implemented in the codebase.