best-practices

Configuring Content Security Policy and security headers involves setting HTTP response headers like CSP, HSTS, and X-Frame-Options. This Skill provides concrete configuration examples and checks to enforce content security policies and prevent vulnerabilities like clickjacking.

The best way to audit a web project is to check against established guidelines for HTTP headers, input sanitization, and browser support. This Skill offers clear checklists to support automated audits and manual code reviews.

Yes, you can integrate web security and quality checks into a CI pipeline. This Skill provides concrete checks and configuration examples designed to be incorporated directly into developer workflows and continuous integration pipelines.

Ensuring browser compatibility and performance for SPAs involves using proper doctype, charset, viewport settings, and feature detection. This Skill provides guidance on polyfills and performance-minded patterns to improve rendering speed.

Input sanitization and secure cookies are essential for a security audit if user inputs or client-side data are handled. This Skill provides concrete checks for secure cookie practices and proper input sanitization to protect web applications.