Secure coding baselines are the minimum secure coding requirements and a checklist for the project team to move to the next stage. Secure coding baselines are also part of the release criteria. It's always suggested you use secure coding guidelines based on industry best practices or standards, such as CERT Secure Coding, as described in the preceding table.
Define secure coding baselines based on each programming language, such as PHP, Python, JavaScript, Android, and iOS. The secure coding baseline is better to include the information not only secure coding rules but also examples of security risks, vulnerable code examples, and suggested ones. Here is an example.
Secure code issue – predictable random numbers:
The use of a predictable random number can result in vulnerabilities in the session ID, token, or encryption initialization...
The use of a predictable random number can result in vulnerabilities in the session ID, token, or encryption initialization...
