Secure Code Review (Static Site)

Purpose

Perform security-focused code reviews for static HTML/CSS websites.

Review Checklist

HTML Security

• ✅ No inline JavaScript (CSP compliance)
• ✅ Semantic HTML5 elements
• ✅ ARIA labels for accessibility
• ✅ Proper <meta> tags (CSP, referrer, viewport)
• ✅ External links use rel="noopener noreferrer"
• ✅ Forms use method="POST" and HTTPS action