What is this?
A free, Tencent-maintained secure coding guide for developers that catalogs API-level security risks and gives concrete, actionable secure-coding solutions.
A free, Tencent-maintained secure coding guide for developers that catalogs API-level security risks and gives concrete, actionable secure-coding solutions.Is this a single document or a set of guides per language?It's an index linking to six separate language-specific guides — C/C++, JavaScript, Node.js, Go, Java, and Python — each documenting risky APIs and safer alternatives for that language.
It's an index linking to six separate language-specific guides — C/C++, JavaScript, Node.js, Go, Java, and Python — each documenting risky APIs and safer alternatives for that language.Where should a developer start?Open the index table on the README and jump to the guide for the language you're using; use it as a day-to-day reference while coding or reviewing code.
Open the index table on the README and jump to the guide for the language you're using; use it as a day-to-day reference while coding or reviewing code.Is this guide still actively updated?All six language guides share the same last-revision date, 2021-05-18, which is also the repo's creation date, suggesting there hasn't been a major content update since launch.
All six language guides share the same last-revision date, 2021-05-18, which is also the repo's creation date, suggesting there hasn't been a major content update since launch.Is this guide available in English, or only in Chinese?The entire guide, including all six per-language documents, is written in Chinese only; no English translation is provided.
The entire guide, including all six per-language documents, is written in Chinese only; no English translation is provided.What practical use cases does this guide support?It's meant for daily developer reference, writing security-scanning rules, building security components, and guiding vulnerability fixes.
It's meant for daily developer reference, writing security-scanning rules, building security components, and guiding vulnerability fixes.What philosophy does the guide follow?It's built on DevSecOps thinking, explaining secure coding in terms developers already understand so vulnerabilities get caught at the source rather than patched later.
It's built on DevSecOps thinking, explaining secure coding in terms developers already understand so vulnerabilities get caught at the source rather than patched later.What are similar projects?HowToLiveBetter, zh-google-styleguide, docker-cheat-sheet, CheatSheetSeries, CS-Xmind-Note, git-flight-rules, modern-cpp-features, naming-cheatsheet
HowToLiveBetter, zh-google-styleguide, docker-cheat-sheet, CheatSheetSeries, CS-Xmind-Note, git-flight-rules, modern-cpp-features, naming-cheatsheetWhich topics is it in?application-security, devsecops, vulnerability, cheatsheet, chinese-language, best-practices, cybersecurity, reference, c, guide, cpp, documentation
application-security, devsecops, vulnerability, cheatsheet, chinese-language, best-practices, cybersecurity, reference, c, guide, cpp, documentation