Security Best Practices

Overview

Identify in-scope languages/frameworks, load matching guidance from references/, and apply it to:

• write secure-by-default code,
• flag critical issues during normal work,
• produce a prioritized security report when requested.

Workflow

1. Identify all in-scope languages/frameworks (frontend and backend where applicable).
2. Load all matching references/ files:
   • <language>-<framework>-<stack>-security.md
   • <language>-general-<stack>-security.md when present.
3. For full-stack web work, cover both frontend and backend.
4. If frontend framework is unspecified, also load javascript-general-web-frontend-security.md.
5. If no matching references exist, use established best practices; if uncertain, research recent authoritative sources.