The list below isn't meant to be exclusive, it's more so a collection of links that have helped me out along the way (and can hopefully help you). As you'll see, I've focused on JavaScript, React, and ...

Block path traversal (.., absolute paths outside the project) Use absolute paths for invoked scripts so PATH attacks don't redirect Explicitly skip sensitive files (.env, .git/, secrets/) Claude Code ...