All topics
Learning hub

Secure Coding cheat sheet & developer notes

Secure Coding cheat sheet and 2 curated developer notes — core concepts, patterns, and interview prep. Maintained by the DevRecall team.

Save this stack to your DevRecallTest yourself — Secure Coding quizMore notes
01 · Secure Coding

Injection, XSS, CSRF & Path Traversal

Secure Coding: Injection, XSS, CSRF & Path Traversal. Secure coding treats security as integrated throughout development -- input validation, proper auth checks, avoiding known vulnerability patterns -- rather than a sep…

Read
02 · Secure Coding

AuthN/AuthZ, Secrets, Race Conditions & Defense in Depth

Secure Coding: AuthN/AuthZ, Secrets, Race Conditions & Defense in Depth. Authentication vs Authorization. // BUG: checks authentication (logged in) but forgets authorization // (does THIS user own THIS resource?) -- clas…

Read

Concepts to know for Secure Coding

All topics →
Prototypes and Inheritance in JavaScriptHow every object links to a prototype, how property lookup walks that chain, what new and class really do, and how prototype pollution turns it into a bug.Intermediate·13 minSQL Injection: How It Works and How to Stop ItWhy gluing input into SQL text lets data become code, why bind parameters fix it for good, and where ORMs, identifiers and stored procedures still leak.Intermediate·13 minXSS and Content Security PolicyWhy injected script gets your origin’s full powers, the three kinds of XSS and their sinks, encoding per context, and how a nonce CSP stops what slips through.Intermediate·14 minPrompt Injection: Why LLM Apps Obey the Wrong TextWhy text an LLM reads can override your instructions, how indirect injection turns tools into exfiltration paths, and which defences actually contain it.Intermediate·14 minSecrets Management: Store, Rotate, Never LeakWhere API keys and passwords really leak, why env vars deliver secrets but do not protect them, and how secret managers and short-lived credentials fix it.Intermediate·14 min

Related stacks

EncryptionFirewallIdentity and Access ManagementIntrusion Detection SystemMulti-Factor AuthenticationPenetration TestingSSL/TLSSecurity Audit.NET.NET MAUIAPI DesignAPI Gateway
Browse all stacks →

Keep your Secure Coding knowledge sharp.

Save this stack to your personal DevRecall — add your own notes, track what you're learning, and share what you know with the community.

Get started — free forever