How important was it to meet security requirements for the application? Were there common threats you had to defend against?

The importance of security requirements for applications cannot be overstated, especially in modern web applications where user data and business logic must be protected from attacks.

Common threats that need to be defended against include:

• XSS (Cross-Site Scripting) — injecting malicious scripts into pages viewed by other users.
• CSRF (Cross-Site Request Forgery) — forging requests on behalf of a user.
• SQL injections — injecting malicious SQL commands through user input.
• Vulnerabilities in authentication and session management — such as session hijacking or impersonation.
• Data leaks through improper error handling or confidential information management.

Protection measures include:

• Validation and escaping of user input.
• Use of Content Security Policy (CSP).
• Implementation of CSRF tokens.
• Secure data storage and transmission (HTTPS, encryption).
• Regular updates of dependencies and libraries.

In real projects, adhering to these requirements helps prevent attacks and maintain user trust.