Security Checklist - Githubissues

cheatcode / joystick

A full-stack JavaScript framework for building stable, easy-to-maintain apps and websites.

https://cheatcode.co/joystick

Other

209 stars 11 forks source link

Closed rglover closed 2 months ago

rglover commented 1 year ago

Need to document a pre-production security checklist:

[ ] Utilize CSP (Content-Security-Policy)
[ ] Utilize the sanitize option on getters and setters.
[ ] Utilize (but be mindful) of the global sanitize option on the API via options.sanitize.
[ ] Don't commit non-development (or non-destructive) settings files to repos.
[ ] Utilize route-based context helpers like ifLoggedIn() and ifNotLoggedIn() (also: #85)

...

rglover commented 1 year ago

Would also be helpful to document what Joystick does behind the scenes automatically to help with security.