Secure Coding

Purpose

Write code where the secure path is the default path. Most vulnerabilities are not clever — they are a string concatenated into a query, an authorization check that was never written, or a password hashed with the wrong algorithm.

When to Use

• Writing code that handles user input, authentication, or sensitive data.
• Implementing authorization.
• Handling passwords, tokens, or encryption.
• Reviewing code for vulnerabilities.

Capabilities