# owasp

> OWASP Top 10 security

- Author: PHAN ANH TUAN
- Repository: TUAN130294/Universalkit
- Version: 20251220090240
- Stars: 0
- Forks: 0
- Last Updated: 2026-02-07
- Source: https://github.com/TUAN130294/Universalkit
- Web: https://mule.run/skillshub/@@TUAN130294/Universalkit~owasp:20251220090240

---

---
name: owasp
description: OWASP Top 10 security
---

# OWASP Skill

## Injection Prevention
```typescript
// Bad
const query = `SELECT * FROM users WHERE id = ${userId}`;
// Good
await db.query('SELECT * FROM users WHERE id = $1', [userId]);
```

## Auth Best Practices
```typescript
const hash = await bcrypt.hash(password, 12);
const token = jwt.sign({ userId }, secret, { expiresIn: '1h' });
```

## Checklist
- [ ] Input validation
- [ ] Parameterized queries
- [ ] Password hashing (bcrypt)
- [ ] HTTPS everywhere
- [ ] Security headers
- [ ] Rate limiting