4 lines
128 B
Plaintext
4 lines
128 B
Plaintext
input validation to avoid XSS and injection
|
|
only allow signup, login ecc over HTTPS
|
|
session expiration
|
|
mark cookies as secure |