As a full stack web developer, is it important to know how to write secure code? I found a few books that cover common vulnerabilities and how to exploit them, but i can't seem to find any books that actually teach counter measures how to write secure websites/webapps
Or is writing secure websites not that important as a freelance web developer?

Check OWASP

Thanks man!

Check SonarQube and use his extension in your IDE (SonarLint)
Not only will it help you learn about vulnerabilities, but over time, you'll also get accustomed to writing cleaner code, following better syntax, and avoiding code smells.

thanks for the info

Often web frameworks will handle security for you, leaving you with only configuration choices.
They implicitly make you avoid stuff like sql injection, XSS, CSRF, IDOR, etc.
You should have TLS/SSL, robust authn and authz, security headers in http methods, safe deserialization, etc

For example Spring Boot is one such framework provided you stay up to date with the latest versions to avoid newly discovered CVEs.

This post was edited by moutonguerrier on Nov 10 2024 07:16am