Web Security Best Practices

Application-level security guidance for WordPress (PHP), Laravel (PHP), Django (Python), FastAPI (Python), and Plotly Dash (Python/Flask).

Important

• Always treat user input as untrusted, including callback inputs in Dash
• Use framework security features instead of custom implementations
• Validate server-side even when client-side validation exists
• Fail securely — errors must not expose system details
• Keep dependencies updated and audited

OWASP Top 10 (2021)

The current OWASP Top 10 categories that this skill addresses: