Web security is an important topic for every developer. OWASP Top 10 — list of most common threats.
Common threats
XSS — malicious JavaScript. Defense: DOMPurify, input sanitization. SQL Injection — prepared statements, ORM. CSRF — CSRF tokens, SameSite cookies. Passwords — bcrypt hashing, never plain text.
General recommendations
HTTPS. Regular updates. Input validation. Error handling. Security headers. OWASP Cheat Sheets.
Conclusion
Security — should be considered from the start of the project.
Source: OWASP Top 10, MDN Web Security
