rspec/rules/S4818/recommended.adoc

7 lines
484 B
Plaintext
Raw Normal View History

2020-06-30 12:49:37 +02:00
== Recommended Secure Coding Practices
* In many cases there is no need to open a socket yourself. Use instead libraries and existing protocols.
* Encrypt all data sent if it is sensitive. Usually it is better to encrypt it even if the data is not sensitive as it might change later.
* https://www.owasp.org/index.php/Input_Validation_Cheat_Sheet[Sanitize] any input read from the socket.
* Limit the number of sockets a given user can create. Close the sockets as soon as possible.