TT Lab
Blog Get started
Learn Learning paths Courses

Guarding Authorization and Input in Code

Write security requirements as tests, then fix the code

중급 · Lessons 18 · Lab 6

Start the lab

Curriculum

Object Ownership and Admin Permissions

Accept Only Allowed Fields and Validate the Schema

Parameterized Queries and a Sort Allowlist

Output Encoding and CSP

Keeping File Paths Inside the Base Directory

An Allowlist for Features That Fetch External URLs

Reference docs