[{"data":1,"prerenderedAt":69},["ShallowReactive",2],{"content-\u002Fsecurity":3},{"id":4,"title":5,"body":6,"description":61,"extension":62,"meta":63,"navigation":64,"path":65,"seo":66,"stem":67,"__hash__":68},"content\u002Fsecurity.md","Frontend Security | Miroslavs Lepickis",{"type":7,"value":8,"toc":57},"minimark",[9,14,18,25,41,46],[10,11,13],"h1",{"id":12},"frontend-security","Frontend security",[15,16,17],"p",{},"Security is treated as a systemic property. The objective is measurable risk reduction without compromising delivery. I authored a company-wide threat vector document - 20+ attack types across a live platform, a concrete mitigation for each - and drove implementation across code and infrastructure.",[15,19,20,24],{},[21,22,23],"strong",{},"Mechanisms",":",[26,27,28,32,35,38],"ul",{},[29,30,31],"li",{},"Secure-by-default rendering, reducing XSS exposure.",[29,33,34],{},"CSRF-aware flows with explicit session boundaries.",[29,36,37],{},"Cryptographic signature verification for sensitive requests.",[29,39,40],{},"Dependency risk management and supply chain hygiene.",[15,42,43,24],{},[21,44,45],{},"Infrastructure",[26,47,48,51,54],{},[29,49,50],{},"Domain allowlists enforced at the edge.",[29,52,53],{},"Request validation before business logic execution.",[29,55,56],{},"Decision-making supported by metrics and audit logs.",{"title":58,"searchDepth":59,"depth":59,"links":60},"",2,[],"Treating security as a systemic property for measurable risk reduction without compromising delivery.","md",{},true,"\u002Fsecurity",{"title":5,"description":61},"security","OdLJiZIo8b0moCiGcz9Xsm2WN3LyEWdnL4tE4mG_cTM",1792230898962]