Concept guides
ReadGuideTrackTopicLevelTime
Error handling & resilienceMediumCodingError handlingCodingError handlingMedium3 minBlocking accept with no timeoutMediumCodingError handlingCodingError handlingMedium4 minConnection pool leaksMediumCodingError handlingCodingError handlingMedium3 minFile descriptor leaksMediumCodingError handlingCodingError handlingMedium5 minHandling a write errorMediumCodingError handlingCodingError handlingMedium4 minHTTP client timeoutsMediumCodingError handlingCodingError handlingMedium3 minHTTP connection leaksMediumCodingError handlingCodingError handlingMedium3 minHTTP status ignored (fetch)MediumCodingError handlingCodingError handlingMedium3 minResource leak (handles that never close)MediumCodingError handlingCodingError handlingMedium3 minTarget leakageMediumCodingError handlingCodingError handlingMedium3 minTemp file leaksMediumCodingError handlingCodingError handlingMedium3 minTLS socket without a clean shutdownMediumCodingError handlingCodingError handlingMedium4 minConnection pool exhaustionMediumCodingError handlingCodingError handlingMedium4 minSQL data accessHardCodingError handlingCodingError handlingHard3 minHTTP retries without backoffHardCodingError handlingCodingError handlingHard3 minHTTP retry idempotencyHardCodingError handlingCodingError handlingHard3 minK-fold cross-validationHardCodingError handlingCodingError handlingHard3 minTime series validationHardCodingError handlingCodingError handlingHard3 min
Security vulnerabilitiesMediumCodingSecurity reviewCodingSecurity reviewMedium3 minHardcoded secretsMediumCodingSecurity reviewCodingSecurity reviewMedium3 minDebug mode in productionMediumCodingSecurity reviewCodingSecurity reviewMedium3 minCORS misconfigurationMediumCodingSecurity reviewCodingSecurity reviewMedium3 minCross-site request forgery (CSRF)MediumCodingSecurity reviewCodingSecurity reviewMedium3 minDependency injectionMediumCodingSecurity reviewCodingSecurity reviewMedium3 minLDAP injectionMediumCodingSecurity reviewCodingSecurity reviewMedium3 minMissing authorization (admin functionality)MediumCodingSecurity reviewCodingSecurity reviewMedium3 minNoSQL injectionMediumCodingSecurity reviewCodingSecurity reviewMedium3 minRegular expression denial of service (ReDoS)MediumCodingSecurity reviewCodingSecurity reviewMedium4 minSensitive data loggingMediumCodingSecurity reviewCodingSecurity reviewMedium3 minTime-of-check to time-of-useMediumCodingSecurity reviewCodingSecurity reviewMedium3 minTLS security vulnerabilityMediumCodingSecurity reviewCodingSecurity reviewMedium3 minInsecure direct object reference (IDOR)MediumCodingSecurity reviewCodingSecurity reviewMedium3 minOpen redirectMediumCodingSecurity reviewCodingSecurity reviewMedium3 minSQL injection (ORDER BY)MediumCodingSecurity reviewCodingSecurity reviewMedium3 minSQL injection (SQLi)MediumCodingSecurity reviewCodingSecurity reviewMedium3 minWeak cryptography: fast hashesMediumCodingSecurity reviewCodingSecurity reviewMedium3 minMissing security headersHardCodingSecurity reviewCodingSecurity reviewHard3 minCommand injection (OS injection)HardCodingSecurity reviewCodingSecurity reviewHard3 minJWT "none" algorithm vulnerabilityHardCodingSecurity reviewCodingSecurity reviewHard3 minMass assignmentHardCodingSecurity reviewCodingSecurity reviewHard3 minXML external entity (XXE) injectionHardCodingSecurity reviewCodingSecurity reviewHard3 minBroken authenticationHardCodingSecurity reviewCodingSecurity reviewHard3 minMissing rate limiting (authentication)HardCodingSecurity reviewCodingSecurity reviewHard3 minServer-side template injectionHardCodingSecurity reviewCodingSecurity reviewHard3 minServer-side template injection (SSTI)HardCodingSecurity reviewCodingSecurity reviewHard3 min