Skills for Development & IT, page 2 55 Skills
Code, tests, docs and operations. Narrow down by sub-area, job, tool and level.
Results
Filters
Filters
Review your cloud bill for savings
Goes through cloud costs by service and project, finds unused and oversized resources and ranks savings by impact and risk.
Find test gaps by risk
Shows where changed or critical code lacks the tests that really matter: around money, permissions, data and error cases.
Check date and time logic for bugs
Checks code for typical date and time bugs: time zones, daylight saving changes, month ends, leap years and comparisons between local time and UTC.
Check texts for translatability
Finds hard-coded texts, stitched-together sentences and badly formatted dates or numbers in code.
Review background jobs for failure points
Checks scheduled and queued jobs for whether they can safely run twice, retry cleanly, have time limits and make errors visible.
Check code for race conditions
Finds places where simultaneous requests, processes or threads overwrite each other's data, book twice or block each other.
Track down a memory leak
Helps narrow down growing memory use in an application: read the measurements, find suspicious places and confirm them with targeted measurements.
Find N+1 queries in code
Finds places where code fires a separate database query for every record inside a loop, and proposes batched queries.
Check API docs for gaps
Compares API documentation with the code and finds missing endpoints, wrong required fields, undocumented error codes and examples that do not run.
Check timeouts on external calls
Finds calls to other services, databases and APIs without a time limit, with endless retries or without a fallback, and proposes sensible limits.
Check server-side input validation
Checks whether every input to the backend is validated for type, length, format and permitted values, independent of checks in the browser.
Check CORS settings of an API
Checks which origins, methods and headers an API allows from other websites and finds settings that are too open, such as any origin together with cookies.
Check HTTP security headers
Checks the response headers of a website for content security policy, HSTS, frame protection, content type and referrer rules and proposes sensible values.
Find personal data in logs
Finds log statements that write names, email addresses, IP addresses, tokens or full request bodies and proposes masking or removal.
Check cache headers
Checks whether pages, files and API answers are cached for the right time and makes sure personal pages are never stored in shared caches.
Check forms for CSRF protection
Checks whether forms and state-changing requests are protected against requests sent from other websites and proposes tokens.
Find open redirects
Finds redirects that take their target from a parameter, such as after login, and makes sure they only lead to allowed addresses.
Check server-side fetches for SSRF
Finds places where the server fetches addresses that come from outside, for example for link previews, webhooks or imports.
Check for mass assignment of fields
Finds places where forms or API requests take over whole data objects so users could also set fields like role, price or owner.
Check regular expressions for ReDoS
Finds regular expressions that take extremely long on certain inputs, for example because of nested repetition, and proposes safe patterns, length limits and time limits.
Check file paths for directory traversal
Finds places where file names or paths from requests, uploads or archives flow into file access, and checks whether someone could read or write files outside the intended folder with input such as ../.
Check caches and loaders for coalescing
Checks places where a cache miss calls the origin and finds missing coalescing of concurrent loads for the same key.
Check multi-step flows for compensation
Checks flows with several write steps for whether a mid-way abort is compensated, retried or clearly marked as failed.
Check for N+1 queries
Checks code and traces for loading a list and then querying again per item, and estimates the round trips.
No matches. Remove a filter or try another word.