What problem does it solve?
Provides comprehensive security coding guidelines to preempt common vulnerabilities in both frontend (XSS, sensitive data exposure) and backend (injections, authentication/authorization, CORS) and to guide secure code reviews, secure implementations, and safe input handling.
Core Features & Use Cases
- Frontend security practices: XSS prevention, safe handling of user input, avoid exposing secrets, and proper input validation before rendering.
- Backend security practices: robust authentication/authorization, injection prevention (SQL/NoSQL), proper CORS configuration, secure error handling, and safe environment variable usage.
- Use cases: When designing or reviewing features, refer to these rules to ensure security by default and to reduce risk in production systems.
Quick Start
Review these guidelines during code development and code reviews to ensure security by default.