Main Points of the Review
Data Storage and Privacy
・Ensure all sensitive data is securely stored, not leaked, and educate users about how their data is processed.
Encryption
・Applications must use secure and current encryption standards to protect the integrity and confidentiality of data, avoiding the use of outdated or insecure algorithms.
Authentication and Session Management
・Implement robust authentication and session management measures to ensure that only authorized users can access and that sessions expire after an appropriate period.
Network Communication
・Ensure all network communications of the application are encrypted using secure protocols and verify the authenticity of all network requests.
Platform Interaction
・Limit the permissions requested by the application, ensure that only verified inputs are processed by the application, and that sensitive functions are not accessed by unauthorized methods or platforms.
Code Quality and Build
・Follow best practices to build the application, remove all unsafe code and known security vulnerabilities, and enable all available security features.