Security System

Overview

Multi-layer security including CSRF protection, rate limiting, input validation, password hashing, and XSS prevention.

Key Features

• CSRF protection on all forms
• Rate limiting on sensitive endpoints
• Secure password hashing (PBKDF2)
• XSS prevention via auto-escape
• SQL injection prevention
• Email verification tokens
• Password reset tokens with expiration

Implementation

See SECURITY.md for detailed security information.