Frontend Security

Purpose

Prevent XSS, CSRF, and injection attacks. CSP blocks unauthorized scripts. SRI ensures CDN integrity. Cookies locked down. All user output encoded.

Agent Protocol

Trigger

Exact user phrases: "XSS", "CSP", "CSRF", "SRI", "secure cookies", "security headers", "frontend security", "sanitize input", "content security policy", "cross-site scripting".

Input Context

Before activating, verify:

• The framework and build tool (React, Vue, Vite, Next.js, etc.).
• Whether the focus is on a new feature, an audit, or a vulnerability fix.

Output Artifact

No file output. Produces security guidance, header configs, or code fixes as text.