Security

Audit dependencies for known vulnerabilities

Scan codebase for leaked secrets and credentials

Generate Content Security Policy headers

Add input sanitization to prevent injection attacks

Create authentication middleware

Implement role-based access control

Add CSRF protection to forms and APIs

Configure security headers (HSTS, X-Frame-Options, etc.)

Set up encryption for sensitive data at rest

Implement API key rotation mechanism

Review and fix SQL injection vulnerabilities

Audit and fix XSS vulnerabilities

Configure secure cookie settings

Generate security testing checklist for the app