Secure defaults quick deck
Recall secure-default moves for access control, input handling, errors, and dependencies.
Access control The button is hidden, so non-admins cannot export. UI visibility is being treated as permission. Your line Hide the button for usability, but enforce role and tenant scope on the server before the export query runs. Client-side gating is not an authorization boundary. It protects direct API calls, route edits, replayed requests, and stale client state. Injection What is the default query rule for user input? Think command construction. Use parameterized queries or safe query builders. Never concatenate untrusted input into SQL, shell commands, HTML, or template expressions. Errors Which error response is safer? Safe errors are both…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in