Find a security recipe
Protect requests, sessions, redirects, content, credentials, and permissions
Protect server operations
| Problem | Recipe |
|---|---|
| Audit a complete interaction | Run the security audit |
| Protect cookie-authenticated writes | Send CSRF proof |
| Enforce current permissions | Handle permission rejection |
| Prevent duplicate critical writes | Use idempotency |
| End an authenticated session | Log out safely |
Protect browser content
| Problem | Recipe |
|---|---|
| Validate a return destination | Prevent open redirects |
| Render user-authored formatting | Sanitize rich text |
| Restrict executable resources | Deploy Content Security Policy |
| Restrict session delivery | Harden session cookies |
| Remove credentials from diagnostics | Redact secrets |
Protect destructive actions
| Problem | Recipe |
|---|---|
| Confirm permanent removal | Confirm deletion |
| Prefer a reversible operation | Archive and restore |
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.