2 ms·
Most security errors are the kind that that the tools catches, like unsanitized SQL or unescaped HTML. Those targeted by nation states or running high value tar
by sudhirj 5y ago
Most security errors are the kind that that the tools catches, like unsanitized SQL or unescaped HTML. Those targeted by nation states or running high value targets probably need third party sec audits, but this is a perfectly good addition to a CI or pre commit hook.
- lima 5y ago> Most security errors are the kind that that the tools catches There's plenty of common logic errors that static analysis can't catch. They may not be readily exploitable by automated scanners, but it doesn't take a nation state.