security-best-practiceslisted

# Secure Programming Best Practices Security checklists by OWASP Top 10 (2021) category, each item linked to its OWASP Cheat Sheet. ## How to Use Walk the checklists for the categories the code touches. For depth: `Grep` `references/` for keywords or ASVS IDs (V1, V1.2, V1.2.4) and read only matching sections (30–50 lines) — never whole files; `search_standards` MCP (if available) for standards beyond local references; fetch the linked cheat sheet when local references aren't enough; for framework-specific pitfalls, use the Cheat Sheets index's Frameworks row below. Cite cheat-sheet URLs and ASVS requirement IDs in output. ### Local Reference Index **ASVS 5.0** — `references/OWASP_Application_Security_Verification_Standard_5.0.0_en.csv` CSV columns: `chapter_id,chapter_name,section_id,section_name,req_id,req_description,level` (L1=basic, L2=standard, L3=advanced) | ID | Chapter | Key sections | |----|---------|-------------| | V1 | Encoding and Sanitization | V1.1 Architecture, V1.2 Injection Prevention, V1.3 Sanitization, V1.4 Memory, V1.5 Safe Deserialization | | V2 | Validation and Business Logic | V2.2 Input Validation, V2.3 Business Logic, V2.4 Anti-automation | | V3 | Web Frontend Security | V3.2 Content Interpretation, V3.3 Cookie Setup, V3.4 Browser Headers, V3.5 Origin Separation, V3.6 Resource Integrity | | V4 | API and Web Service | V4.1 Generic Web Service, V4.2 HTTP Message Validation, V4.3 GraphQL, V4.4 WebSocket | | V5 | File Handling | V5.2 Upload and Co