Avoid IDOR bugs PART II
Developer Responsibility and Security Awareness
As developers, we are responsible for the following:
- Write clean, understandable, and maintainable code.
- Make code that speaks for itself. (AKA: no comments)
- Name things properly — variables good, vague names bad.
But we are only human; despite what many might think, we all make mistakes. Those mistakes show up as issues during an application's usage.
The dreaded bugs!
We can't avoid introducing them sometimes, but we can reduce them with good practices.