paqad-ai
Version:
Spec-driven development framework — AI agents that think before they type
7 lines (5 loc) • 367 B
Markdown
# Flask Security Review Checklist
- Confirm `SECRET_KEY` and database credentials are not committed in app config.
- Review auth/session cookie settings and CSRF posture for browser forms.
- Validate all route inputs and confirm SQLAlchemy or raw SQL usage is parameterized.
- Check blueprint registration and debug configuration for unintended production exposure.