Key points
- 01Security audit with remediation of critical vulnerabilities
- 02Nonce-based Content Security Policy instead of unsafe-inline
- 03Refactoring for cognitive complexity and SonarQube compliance
Context
A bespoke tailor manages orders and customer measurements that must stay accurate, confidential and always available. The platform serves several ateliers at once and has to be deployable both on-premise and in the cloud.
Approach
The platform is multi-tenant and integrates identity management and access control. A significant part of the work focused on security: a full audit with remediation of critical vulnerabilities and the adoption of a nonce-based Content Security Policy instead of unsafe-inline.
Technical choices
- ASP.NET Core MVC with EF Core, compatible with both SQL Server and PostgreSQL.
- Nonce-based CSP to eliminate uncontrolled inline scripts.
- Targeted refactoring to reduce cognitive complexity and reach SonarQube compliance.