Security coding introduction resource recommendation
Open Network Application Security Plan (OWASP) is a good starting point for security coding. Among them, their "quick reference guide" is a right-hand man in the development process. It can be used as your recheck tool to make full use of these valuable resources.
Defensive programming skill sharing
Defensive programming is the key to avoid loopholes. Try this trick of equivalent comparison! Put a constant in front of the comparison statement. If the assignment operator is misused, you will be reminded at compile time or run time.
Importance of data cleaning
In digital identity system, both external data sources and data provided by users need to be regarded as untrustworthy. Both Web clients and server applications should clean up the received data to ensure that it only contains allowed characters and formats. Please pay special attention to check the length of big data fields to prevent buffer overflow attacks.
Improve programming safety skills
Take action to improve your programming security skills and protect your code from attacks!