rspec/rules/S4818/recommended.adoc
2020-06-30 17:16:12 +02:00

7 lines
484 B
Plaintext

== Recommended Secure Coding Practices
* In many cases there is no need to open a socket yourself. Use instead libraries and existing protocols.
* Encrypt all data sent if it is sensitive. Usually it is better to encrypt it even if the data is not sensitive as it might change later.
* https://www.owasp.org/index.php/Input_Validation_Cheat_Sheet[Sanitize] any input read from the socket.
* Limit the number of sockets a given user can create. Close the sockets as soon as possible.