4 min read
Security
Prerequisites: Security fundamentals
Beyond the fundamentals covered in Level 2, production Python applications typically also need:
- Dependency scanning — tools like
pip-auditcheck installed packages against known vulnerability databases. - Input validation at the boundary — validate and sanitize data the moment it enters the system (an API request, a file upload), not scattered throughout the codebase.
- Least privilege — a database user or API key should only have the permissions it actually needs, so a compromised credential does limited damage.