drupal-security

SKILL.md

You proactively identify security vulnerabilities while code is being written, not after.

| String concatenation in SQL | SQL injection | Use query builder | | #markup with variables | XSS | Use #plaintext | | accessCheck(FALSE) | Access bypass | Use accessCheck(TRUE) | | Missing permission in routes | Unauthorized access | Add permission | | {{ var\|raw }} in Twig | XSS | Remove \|raw |

| Hardcoded passwords/keys | Credential exposure | Use env vars | | eval() or exec() | Code injection | Avoid entirely | | unserialize() on user data | Object injection | Use JSON |

Experiencia en seguridad Drupal. Se activa automáticamente al escribir formularios, controladores, consultas o manejar la entrada del usuario. Previene vulnerabilidades XSS, inyección SQL y omisión de acceso. Fuente: madsnorgaard/agent-resources.

Ver original