Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions src/features/commands.ts
Original file line number Diff line number Diff line change
Expand Up @@ -373,6 +373,33 @@ Have a look at these resources on how to ask good questions:
- [Coding Killed the Cat: "How to Ask for Programming Help"](http://wp.me/p2oIwo-26)
- [Stack Overflow: "How do I ask a good question?"](https://stackoverflow.com/help/how-to-ask)
- [Eric S. Raymond; "How To Ask Questions The Smart Way"](https://git.io/JKscV)
`,
color: EMBED_COLOR,
},
],
});
},
},
{
words: [`!security`],
help: `general information around managing security for a web application.`,
category: "Reactiflux",
handleMessage: (msg) => {
msg.channel.send({
embeds: [
{
title: "Security Tips",
type: EmbedType.Rich,
description: `Managing security in a web application requires a proactive approach.

Some points to consider:

- Don't use create-react-app it is [no longer recommended](https://react.dev/blog/2025/02/14/sunsetting-create-react-app).
- Set up automated alerts via a service like [dependabot](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide) to be notified of new disclosures.
- Review packages either by inspecting the code or use a service like [Snyk](https://security.snyk.io/vuln/npm).
- Proactively keep your technology up to date – (everything not just packages).
- Test your code – follow safe practices (like sanitising errors) and ensure you audit features and functionality before pushing to prod.
- Set up multi-factor authentication and avoid re-using passwords by implementing something like a password manager to avoid credential stuffing attacks.
Comment on lines +401 to +402
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't love these 2 points in a frequently-reused command, as advice they're not super actionable on their own — it would be great to see these link out to other resources that are somewhat comprehensive/canonical as to what threats exist and what mitigations are recommended. I don't have great recommendations handy immediately, though

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's completely fair - I'll do some digging and see what i can find. I did try to bring it back to the simple stuff but also wanted to ensure it captured the essence of "its not just packages and lets be sensible."

`,
color: EMBED_COLOR,
},
Expand Down