Skip to content
KW

090 m/repository

Security in depth

The practices below appear across different projects and work as complementary layers. Pick a scenario to see where it is contained.

  1. 000 m/interface

    • Output escaping (React)
    • CSP
    • HSTS
    • X-Frame-Options
    • Referrer-Policy

  2. 030 m/route

    • Rate limiting
    • Anti-bot (Turnstile)
    • Origin check
    • Signed session (HMAC)
    • Session revocation

  3. 060 m/service

    • Zod validation
    • RBAC
    • Ownership check (anti-IDOR)
    • Webhook signature
    • MIME allowlist
    • Non-enumerable codes

  4. 090 m/repository

    • Parameterized queries
    • Tenant scoping
    • Atomic operations

  5. 120 m/persistence

    • RLS
    • bcrypt
    • AES-256-GCM