Input validation and XSS prevention audit #34

Open
opened 2026-05-21 23:00:17 +00:00 by jmiller · 0 comments
Owner

CSV import needs injection prevention. Contact form needs rate limiting and HTMLPurifier. All outputs need escape() audit. Need CSP headers for inline map scripts. File upload MIME/size validation.

CSV import needs injection prevention. Contact form needs rate limiting and HTMLPurifier. All outputs need escape() audit. Need CSP headers for inline map scripts. File upload MIME/size validation.
Sign in to join this conversation.