Security Review

Kdy pouzit

• Jako soucast deep-review
• Pred deployem do produkce
• Po pridani auth/payment/sensitive features
• Security audit

OWASP Top 10 Checklist

1. Injection (SQL, NoSQL, OS Command)

Python/SQLAlchemy:

# VULNERABLE
query = f"SELECT * FROM users WHERE id = {user_id}"