{"id":"security","title":"Security","sections":[{"id":"overview","title":"Overview","html":"<p>This section could use some updates.  Consider <a href=\"/learn/about#contributing\">contributing</a>!</p>\n<p>Security is a broad topic.  Unless you have considerable experience, a security background, or are applying for a position that requires knowledge of security, you probably won't need to know more than the basics:</p>\n<ul>\n<li>Encrypt in transit and at rest.</li>\n<li>Sanitize all user inputs or any input parameters exposed to user to prevent <a href=\"https://en.wikipedia.org/wiki/Cross-site_scripting\" target=\"_blank\" rel=\"noopener noreferrer\">XSS</a> and <a href=\"https://en.wikipedia.org/wiki/SQL_injection\" target=\"_blank\" rel=\"noopener noreferrer\">SQL injection</a>.</li>\n<li>Use parameterized queries to prevent SQL injection.</li>\n<li>Use the principle of <a href=\"https://en.wikipedia.org/wiki/Principle_of_least_privilege\" target=\"_blank\" rel=\"noopener noreferrer\">least privilege</a>.</li>\n</ul>\n<h3 id=\"sources-and-further-reading-12\">Source(s) and further reading</h3>\n<ul>\n<li><a href=\"https://github.com/shieldfy/API-Security-Checklist\" target=\"_blank\" rel=\"noopener noreferrer\">API security checklist</a></li>\n<li><a href=\"https://github.com/FallibleInc/security-guide-for-developers\" target=\"_blank\" rel=\"noopener noreferrer\">Security guide for developers</a></li>\n<li><a href=\"https://www.owasp.org/index.php/OWASP_Top_Ten_Cheat_Sheet\" target=\"_blank\" rel=\"noopener noreferrer\">OWASP top ten</a></li>\n</ul>","headings":[{"id":"sources-and-further-reading-12","title":"Source(s) and further reading","depth":3}]}],"sourceFiles":[]}