> For the complete documentation index, see [llms.txt](https://notes.kraken-security.ru/kraken/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.kraken-security.ru/kraken/secure-coding.md).

# Справочник по безопасной разработке

- [CLIENT SIDE](https://notes.kraken-security.ru/kraken/secure-coding/client-side.md)
- [Cross-Site Scripting \[XSS\]](https://notes.kraken-security.ru/kraken/secure-coding/client-side/cross-site-scripting-xss.md)
- [Cross-Site Request Forgery \[CSRF\]](https://notes.kraken-security.ru/kraken/secure-coding/client-side/cross-site-request-forgery-csrf.md)
- [Clickjacking](https://notes.kraken-security.ru/kraken/secure-coding/client-side/clickjacking.md)
- [Open Redirects](https://notes.kraken-security.ru/kraken/secure-coding/client-side/open-redirects.md)
- [SERVER SIDE](https://notes.kraken-security.ru/kraken/secure-coding/server-side.md)
- [SQL Injections \[SQLi\]](https://notes.kraken-security.ru/kraken/secure-coding/server-side/sql-injections-sqli.md)
- [XML External Entity Injection \[XXE\]](https://notes.kraken-security.ru/kraken/secure-coding/server-side/xml-external-entity-injection-xxe.md)
- [OS Command Injection \[Command Execution\]](https://notes.kraken-security.ru/kraken/secure-coding/server-side/os-command-injection-command-execution.md)
- [File Upload](https://notes.kraken-security.ru/kraken/secure-coding/server-side/file-upload.md)
- [Server-Side Request Forgery \[SSRF\]](https://notes.kraken-security.ru/kraken/secure-coding/server-side/server-side-request-forgery-ssrf.md)
- [Host Header Injection](https://notes.kraken-security.ru/kraken/secure-coding/server-side/host-header-injection.md)
- [Аутентификация](https://notes.kraken-security.ru/kraken/secure-coding/server-side/autentifikaciya.md)
- [Directory Traversal](https://notes.kraken-security.ru/kraken/secure-coding/server-side/directory-traversal.md)
- [Template Injection \[SSTI\]](https://notes.kraken-security.ru/kraken/secure-coding/server-side/template-injection-ssti.md)
- [API](https://notes.kraken-security.ru/kraken/secure-coding/api.md)