You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: security-checklist.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -26,7 +26,7 @@
26
26
-[ ]`Edit email/phone number` feature should be accompanied by a verification email to the owner of the account.
27
27
-[ ] Any upload feature should sanitize the filename provided by the user. Also, for generally reasons apart from security, upload to something like S3 (and post-process using lambda) and not your own server capable of executing code.
28
28
-[ ]`Profile photo upload` feature should sanitize all the `EXIF` tags also if not required.
29
-
-[ ] For user ids and other ids, use [RFC complaint](http://www.ietf.org/rfc/rfc4122.txt)`UUID` instead of integers. You can find an implementation for this for your language on Github.
29
+
-[ ] For user ids and other ids, use [RFC compliant](http://www.ietf.org/rfc/rfc4122.txt)`UUID` instead of integers. You can find an implementation for this for your language on Github.
30
30
-[ ] JWT are awesome, use them if required for your single page app/APIs.
0 commit comments