security-best-practices

Prevent SQL injection and XSS by rigorously validating external inputs and applying secure coding patterns. This Skill details specific input validation and secure configuration strategies to block these common web vulnerabilities.

Implement microservices authentication and authorization using secure token management and strict access control boundaries. This Skill guides setting permission boundaries and resilient access controls across distributed services.

Securely manage API secrets and handle errors by following dedicated best practices for secrets management and secure error handling. This Skill provides guidelines to protect sensitive data and prevent information leakage.

Yes, you can apply these secure coding patterns to a new API endpoint. The Skill guides implementing proper authentication, input validation, and rate limiting to protect new endpoints against common attacks.

Input validation is essential for microservices security because it stops injection attacks at the boundary. This Skill ensures all external inputs are rigorously checked before processing to protect backend systems.

Secure configuration alone cannot replace active vulnerability prevention; it must combine with strong error handling and dependency management. This Skill addresses comprehensive resilience alongside configuration to prevent common attacks.