> For the complete documentation index, see [llms.txt](https://vladtoie.gitbook.io/secure-coding/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://vladtoie.gitbook.io/secure-coding/master.md).

# Secure Coding Handbook

Welcome to the **Secure Coding Handbook!** Here, you will find everything that I have found on secure coding: best practices, analyzing, and, of course, patching **code-related** vulnerabilities. All of the enumerated attacks and defensive techniques are strictly related to web applications. (for now :) )

### Handbook structure:

{% content-ref url="/pages/-MYPEAnC2tAqg83LGyF7" %}
[Resources](/secure-coding/resources.md)
{% endcontent-ref %}

{% content-ref url="/pages/-MaNQNr518uEbUgXPTEY" %}
[Client side](/secure-coding/client-side/xss.md)
{% endcontent-ref %}

{% content-ref url="/pages/-Mcey3F70pUTH312Wniu" %}
[Server Side](/secure-coding/server-side/sql-injections.md)
{% endcontent-ref %}

{% content-ref url="/pages/-MkbQyGQooKbSe28W48m" %}
[API](/secure-coding/api/broken-object-level-authorization.md)
{% endcontent-ref %}

{% content-ref url="/pages/-MarL8XBVHAqwfH6A3zk" %}
[Auxiliary](/secure-coding/auxiliary/vulnerable-dependency-management.md)
{% endcontent-ref %}

{% content-ref url="/pages/7s2OwfD3b1IieUSpDNvU" %}
[Solidity](/secure-coding/solidity/re-entrancy.md)
{% endcontent-ref %}

#### Spotted a bug?

Making mistakes is human nature, fortunately. Please note that I am by no means an expert and should you find something that is totally erroneous or deviated from the subject, please [create an issue here](https://github.com/joswha/Secure-Coding-Handbook/issues). 

#### Want to contribute?

Sure thing! Message me on Twitter [**@VladToie**](https://twitter.com/VladToie), or simply write a pull request in the [**Secure-Coding-Handbook**](https://github.com/joswha/Secure-Coding-Handbook) repository.

You can also buy me a **Pizza so I wouldn't have to cook it myself, and write more guides in that time =D** 

{% embed url="<https://www.buymeacoffee.com/bobi>" %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://vladtoie.gitbook.io/secure-coding/master.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.