security-review

To audit code for security vulnerabilities, review application code for unsafe implementation patterns across authentication, authorization, input validation, and secrets management to prevent breaches and leaks before production deployment.

A code security review for API endpoints covers assessing authentication gates, authorization role checks, CSRF protection, rate limiting, and sensitive endpoint behavior to ensure proper access control and prevent unauthorized actions.

To check for poor secrets hygiene, verify that API keys, tokens, passwords, and environment variables are handled safely within the codebase, ensuring no hardcoded credentials are exposed during application execution or deployment.

Prevent injection issues and XSS by validating user input, enforcing parameterized queries, and applying sanitized output rendering to block unsafe data execution and protect sensitive data workflows in application code.

Yes, this code review approach works for checking file uploads and dependency hygiene by evaluating unsafe implementation patterns and enforcing production security checklists to maintain secure application states.