Chapter 7: Dealing with Security Concerns
When you're building a web application, it may be very tempting to sit down, plan out your functionality, build it, test it, and only then come back to think about security. For example, when you're building a single-page application (SPA), you may not even consider CORS until the first time you see this message in the browser while testing:
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at $somesite.
To a large extent, this is how we have been building in this book. We see a feature and build it. Anytime we have come across a potential security issue in this book, we have pushed it to a later date. Finally, we are at the point where we will learn how to deal with security issues in Sanic. The topic of web security is, of course, extremely broad, and it is beyond the scope of this book to provide an exhaustive study.
Instead, in this chapter, we will cover the following topics:...
