Front

Buffer Overflow

Back

Use input validation and bounds checking to limit data size.

Front

Code Injection

Back

Sanitize input so users can't run dangerous commands.

Front

SQL Injection (SQLi)

Back

Use parameterized queries (also called prepared statements).

Front

Cross-site Scripting (XSS)

Back

Escape output and encode user input shown on webpages.

Front

Privilege Escalation

Back

Use least privilege—only give users the access they need.

Front

Directory Traversal

Back

Use input sanitization to block unsafe file paths.

Front

Misconfiguration

Back

Harden configurations by turning off unused features and setting secure defaults.

Front

Replay Attack

Back

Use nonces or timestamps to make actions unique.

Front

CSRF/XSRF

Back

Use CSRF tokens in forms to verify real users.

Front

Race Condition

Back

Use locking mechanisms to control access to resources.