standard-api-security-baseline
安全基线：自托管不透明 HttpOnly cookie 会话下，改会话、越权过滤、后台 mTLS、CORS、密钥与 bcrypt、CDN 真实 IP、验证码、第三方 identity token、富文本清洗或 PII 日志时使用。
Pinned to revision bf14a33490de, so it is the text this page describes rather than whatever the author pushed since.
Files
Every link opens the file at its source, pinned to the revision this page describes.