# Secure Coding Handbook

Welcome to the **Secure Coding Handbook!** Here, you will find everything that I have found on secure coding: best practices, analyzing, and, of course, patching **code-related** vulnerabilities. All of the enumerated attacks and defensive techniques are strictly related to web applications. (for now :) )

### Handbook structure:

{% content-ref url="resources" %}
[resources](https://vladtoie.gitbook.io/secure-coding/resources)
{% endcontent-ref %}

{% content-ref url="client-side" %}
[client-side](https://vladtoie.gitbook.io/secure-coding/client-side)
{% endcontent-ref %}

{% content-ref url="server-side" %}
[server-side](https://vladtoie.gitbook.io/secure-coding/server-side)
{% endcontent-ref %}

{% content-ref url="api" %}
[api](https://vladtoie.gitbook.io/secure-coding/api)
{% endcontent-ref %}

{% content-ref url="auxiliary" %}
[auxiliary](https://vladtoie.gitbook.io/secure-coding/auxiliary)
{% endcontent-ref %}

{% content-ref url="solidity" %}
[solidity](https://vladtoie.gitbook.io/secure-coding/solidity)
{% endcontent-ref %}

#### Spotted a bug?

Making mistakes is human nature, fortunately. Please note that I am by no means an expert and should you find something that is totally erroneous or deviated from the subject, please [create an issue here](https://github.com/joswha/Secure-Coding-Handbook/issues).&#x20;

#### Want to contribute?

Sure thing! Message me on Twitter [**@VladToie**](https://twitter.com/VladToie), or simply write a pull request in the [**Secure-Coding-Handbook**](https://github.com/joswha/Secure-Coding-Handbook) repository.

You can also buy me a **Pizza so I wouldn't have to cook it myself, and write more guides in that time =D**&#x20;

{% embed url="<https://www.buymeacoffee.com/bobi>" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://vladtoie.gitbook.io/secure-coding/master.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
