Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions src/features/commands.ts
Original file line number Diff line number Diff line change
Expand Up @@ -373,6 +373,35 @@ Have a look at these resources on how to ask good questions:
- [Coding Killed the Cat: "How to Ask for Programming Help"](http://wp.me/p2oIwo-26)
- [Stack Overflow: "How do I ask a good question?"](https://stackoverflow.com/help/how-to-ask)
- [Eric S. Raymond; "How To Ask Questions The Smart Way"](https://git.io/JKscV)
`,
color: EMBED_COLOR,
},
],
});
},
},
{
words: [`!security`],
help: `general information around managing security for a web application.`,
category: "Reactiflux",
handleMessage: (msg) => {
msg.channel.send({
embeds: [
{
title: "Security Tips",
type: EmbedType.Rich,
description: `Managing security in a web application requires a proactive approach.

Some points to consider:

- Don't use create-react-app it is [no longer supported](https://react.dev/blog/2025/02/14/sunsetting-create-react-app).
- Set up automated alerts via a service like [dependabot](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide) to be notified of new disclosures.
- Review packages either by inspecting the code or using a service like [Snyk](https://security.snyk.io/vuln/npm).
- Apply [secure coding principles and practices](https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/stable-en/02-checklist/05-checklist.html) - there are [free for open source tool](https://owasp.org/www-community/Free_for_Open_Source_Application_Security_Tools) like [Sonar Qube](https://www.sonarsource.com/open-source-editions/sonarqube-community-edition/) which help find common vulnerabilities like SQL injection, cross-site scripting (XSS), path traversal, and insecure configurations.
- Proactively keep your technology up to date – (everything not just packages).
- Keep your identity safe online, don't reuse passwords, enable multi-factor authentication and use a password manager service.

If you are ever unsure just ask! Better to be safe then sorry.
`,
color: EMBED_COLOR,
},
Expand Down