Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conducting security reviews. Triggers on OWASP, security, XSS, SQL injection, CSRF, authentication security, secure coding, vulnerability.

OWASP Top 10 Security Prevent common security vulnerabilities in web applications. OWASP Top 10 (2021) Vulnerability Prevention A01 Broken Access Control Proper authorization checks A02 Cryptographic Failures Strong encryption, secure storage A03 Injection Input validation, parameterized queries A04 Insecure Design Threat modeling, secure patterns A05 Security Misconfiguration Hardened configs, no defaults A06 Vulnerable Components Dependency scanning, updates A07 Auth Failures MFA, secure session management A08 Data Integrity Failures Input validation, signed updates A09 Logging Failures Comprehensive audit logs A10 SSRF URL validation, allowlists A01: Broken Access Control Prevention Patterns Insecure Direct Object Reference (IDOR) A02: Cryptographic Failures Password Hashing Secure Headers A03: Injection SQL Injection Prevention NoSQL Injection Prevention Command Injection Prevention A04: Insecure Design Rate Limiting Input Validation A05: Security Misconfiguration Environment Configuration A06: Vulnerable Components Dependency Scanning A07: Authentication Failures Secure Session Management Multi Factor Authentication A08: XSS Prevention A09: Logging & Monitoring A10: SSRF Prevention Security Checklist Resources OWASP Top 10 : https://owasp.org/Top10/ OWASP Cheat Sheets : https://cheatsheetseries.owasp.org/ Node.js Security : https://nodejs.org/en/docs/guides/security/ Snyk : https://snyk.io/

owasp-security