Security
- Validate shape and bounds at the server boundary even when the UI validates first.
- Parameterize database queries and encode output for the destination context.
- Authorization belongs at the resource access point, not only in hidden buttons.
Cool NotesInput validation and injection
All notesInput validation and injection
Security · Original AlgoGym revision note with a source for deeper study.