FlorianBruniaux Cybersec Skills — ccboard
Security audit toolkit for the ccboard Rust/Leptos stack.
Reference files in this directory
These files are reference documentation for security test patterns. Update them to reflect ccboard's actual Axum routes, auth flows, and data model.
Key security areas for ccboard
- Authentication: session tokens, CSRF protection in Leptos forms
- Authorization: route-level guards in Axum middleware
- WASM: client-side code exposure, sensitive data in WASM binary
- SQL: raw query usage, input sanitization
- Dependency audit:
cargo auditfor known CVEs in dependencies
Usage
cargo audit # CVE scan
grep -r "unsafe" src/ # unsafe block audit
grep -r "unwrap()" src/ | wc -l # panic surface audit