Security & Privacy · page 2

Combine dependency, header, authentication, and authorization checks into a release review.

Identify unresolved secret references and unsafe secret exposure patterns.

Find external links with missing or inconsistent relationship attributes.

Identify inline scripts and style references relevant to a supplied CSP policy.

Validate password rules against a defined organizational policy.

Review container privileges, capabilities, mounts, and namespace settings.

Detect embedded geographic coordinates that may reveal image location.

Replace unsafe filename characters and normalize image filenames.

Check login field attributes and password manager interaction.

Flag URLs containing embedded usernames, passwords, or sensitive query parameters.

Review framing restrictions and related response headers.

Find new-tab links that may need appropriate rel attributes.

Review common Windows security settings.

Inspect HTTP Strict Transport Security configuration.

Build random passwords from the Web Crypto CSPRNG with rejection sampling — no modulo bias, and every character class you enable is guaranteed to appear.