Cheat Sheets

Quick reference cheat sheets for common web security tasks.

XSS Prevention Cheat Sheet

• Encode output for the correct context
• Use CSP
• Use HttpOnly cookies
• Use modern frameworks with auto-escaping

SQL Injection Prevention Cheat Sheet

• Use parameterized queries
• Use stored procedures
• Validate input types
• Apply least privilege

Authentication Cheat Sheet

• Implement MFA
• Use strong password hashing
• Implement account lockout
• Use secure session management