Next.js 16 Security Standards

What problem does it solve?

This Skill establishes mandatory security practices for Next.js 16+ development within the Arlis codebase, ensuring robust protection against common vulnerabilities.

Core Features & Use Cases

• Data Access Layer (DAL): Centralizes data fetching, authorization, and DTO creation, ensuring data is only accessed and returned securely.
• Database Security: Enforces Row Level Security (RLS) for all tables and provides guidelines for secure use of admin clients.
• Server Actions & Mutations: Details secure practices for handling user input, authentication, authorization, and preventing common web vulnerabilities like CSRF.
• Use Case: Developers can refer to this Skill to implement secure data handling, prevent data leakage to the client, and ensure all user-facing actions are properly authenticated and authorized, maintaining the integrity of the Arlis application.

Quick Start

Consult the Next.js 16 Security Standards skill for mandatory security practices.