UNPKG

paqad-ai

Version:

Spec-driven development framework — AI agents that think before they type

github.com/Eliyce/paqad-ai

Eliyce/paqad-ai

8 lines (6 loc) • 539 B
1
2
3
4
5
6
7
8
# Express Security Review Checklist - Validate authentication middleware is applied to all protected route groups; check for missing `app.use` ordering issues. - Review `helmet` configuration: confirm CSP, HSTS, and X-Frame-Options are set appropriately. - Check for prototype pollution and injection exposure in body-parser input paths. - Confirm environment variables are loaded via `dotenv` or equivalent and secrets are not hardcoded. - Review CORS `origin` option: ensure it is not set to `true` (mirrors all origins) in production.