Beta: Front-End Checklist is currently in beta. Some issues are still being fixed. Thanks for your patience.

ListsLoading

Security

Web security best practices and protection against vulnerabilities.

Authentication

0/2checked

Set Secure, HttpOnly, and SameSite flags on session cookies

High

Store authentication tokens securely

High

Data

0/3checked

Leaked Environment Variables

Critical

Audit dependencies for known vulnerabilities

High

Prevent stack trace exposure in production error responses

High

Forms

Build accessible, user-friendly form experiences.

0/3checked

Submit forms over HTTPS

Critical

Secure password input fields

HTMLAccessibilityHigh

Protect public forms with CAPTCHA

Medium

Headers

0/8checked

Implement a content security policy

High

Set an HSTS header

High

Set X-Content-Type-Options: nosniff

High

Set an X-Frame-Options header

High

Use COOP, COEP, and CORP for cross-origin isolation when needed

JavaScriptMedium

External Link Security

Medium

Set a Permissions-Policy header

Medium

Set a Referrer-Policy header

Medium

Privacy

Protect user data, consent flows, and privacy-sensitive browser behavior.

0/3checked

Link to your terms of service in the footer

SEOMedium

Blocked Tracking Links

Low

Adblock Element Hiding

Low

Transport

0/3checked

Redirect HTTP to HTTPS

Critical

Serve all pages over HTTPS

Critical

Avoid mixed content on HTTPS pages

High

0 / 385