Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve security of the backend #27

Open
Joshna907 opened this issue Oct 11, 2024 · 3 comments
Open

Improve security of the backend #27

Joshna907 opened this issue Oct 11, 2024 · 3 comments

Comments

@Joshna907
Copy link

Input Validation & Sanitization: Ensure all user inputs are validated and sanitized to prevent attacks like SQL injection and XSS.

Secure Environment Variables: Move sensitive information (API keys, database credentials) to environment variables and add a .env.example file.

Add Secure Headers: Implement secure headers (using helmet) to prevent clickjacking, XSS, and content sniffing.

JWT Security: Ensure JWT tokens use secure algorithms (e.g., RS256), set expiration, and add refresh tokens.

@Joshna907 Joshna907 changed the title We need to improve the security of the backend and infrastructure to protect the system from common vulnerabilities and ensure data safety. Improve security of the backend Oct 11, 2024
@gaurkrutika
Copy link

Can you assign this to me? @visheshrwl

@anishka25
Copy link
Contributor

Can you please assign this issue to me ? I have experience in doing the same

@visheshrwl
Copy link
Owner

Hey @Joshna907 , @gaurkrutika , @anishka25 ! 👋

First off, I want to extend a huge thank you to all of you for your amazing contributions to this project! Your support and hard work mean a lot, and I truly appreciate everything you do. 🙏

I have a small favor to ask: if you think I’ve been helpful and supportive throughout your contributions, I would be honored if you could nominate me by filling out this form: Nominate me.

Your nomination would mean the world to me, and it’s a great way to help me continue supporting our awesome community. Thanks again for all the amazing work, and let's keep making great things happen! 🚀

Best,
Vishesh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants