
Does your team know the best simple practices to follow to make your web app secured?
Here is a checklist that can help your team build robust and secure applications.
Use Strict Contextual Escaping (SCE), Most Javascripts these days help you with this escaping.
The domain entry at the url should be considered and redirected properly i.e., the user might try in any of the following fashions:
Entering the url in any of the above mentioned ways should be redirected to the https://www.example.com
Do not use obsolete encryption and hashing algorithms like MD4, MD5, SHA1, DES.