fraujulian/MyAiConfiguration
1
0 Fork 0
Code Issues Pull Requests Actions Activity

docs(security): define baseline and testing scope

Browse Source
This commit is contained in:
Julian lechner committed 2026-09-30 09:23:52 +02:00
1 parent da11841565
commit 5c1795a601
5 files changed
+20 -13
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

shared/rules/security/references/data.md
+1 -1
View File
@@ -8,4 +8,4 @@
* Encrypt sensitive data in transit and at rest where appropriate; keep key access separate from database access.
* Use transactions and suitable constraints where integrity requires atomicity. Check concurrency and isolation around security-sensitive state changes.
* Avoid raw database errors and sensitive query parameters in responses, logs, traces, and metrics.
* Test injection, cross-tenant access, unauthorized mutation, stale updates, and cache isolation within the approved scope.
* Test injection, cross-tenant access, unauthorized mutation, stale updates, and cache isolation within the user's requested scope.