@@ -0,0 +1,4 @@
bcrypt passwords
session management using proper random tokens
CSRF protection
input validation to avoid XSS and injection
The note is not visible to the blocked user.