Purpose
Ensure NEAN code is secure by default. For security output format and core refusal policy, see /shared-sec-baseline.
NEAN-specific security concerns (always check)
- SQL injection — use TypeORM parameterized queries; never interpolate user input into raw SQL
- Input validation — class-validator decorators on all DTOs at every API boundary
- XSS — Angular sanitizes by default; audit
[innerHTML]andbypassSecurityTrust*usage - CSRF — required when using
[Description truncada. Veja o README completo no GitHub.]