@@ -1,4 +1,5 @@
input validation to avoid XSS and injection
only allow signup, login ecc over HTTPS
session expiration
mark cookies as secure
consider SameSite=Strict
The note is not visible to the blocked user.