rspec/rules/S4825/recommended.adoc
2020-06-30 17:16:12 +02:00

7 lines
570 B
Plaintext

== Recommended Secure Coding Practices
* First, it is important to encrypt all HTTP connection if there is any chance for them to be eavesdropped. Use HTTPS whenever possible.
* Ensure that you control the URIs you send requests to and the number or requests you send. Your software could otherwise be used to attack other services.
* Avoid sending sensitive information, be it in the URL, header or body. If part of the data comes from an untrusted source, such as a user input, sanitize it beforehand.
* Validate and sanitize the response before using it in any way.