Security in Bitrix

Baseline: main 23.0+. Features newer than baseline are marked Since.

Progressive disclosure: open only the rule files that match the task. Do not read every rules/*.md.

How to use

1. Identify the layer the task touches.
2. Open the matching rules/*.md below.
3. Prefer framework-native Bitrix patterns over custom abstractions.

Choose a rule file

When to read rules/csrf-xss.md

Read rules/csrf-xss.md (CSRF and XSS) when the task involves: