Every published module, all in one place.
View the Security category page
2 modules
Security → File Uploads
Handling user file uploads safely: validating type by content not extension, enforcing size limits, re-encoding images, storing outside the webroot, random filenames, never executing from upload dirs, malware scanning, and correct serving headers.
by @markdowners
Security → Input Validation
Validating untrusted input at every trust boundary: server-side enforcement, allowlists over blocklists, schema and range checks, canonicalization, and safe error messages.