Attack surface
Every place a stranger can send something to your site or its services
Words that go with it
- BotA program that visits websites automatically. Some are useful (Google's), many are not
- Defence in layersSeveral independent locks, so one mistake doesn't open everything (Lesson 9.4)
- Leaked keyA secret key that has been somewhere other than .env.local, Vercel or your password manager
- Open databaseA database whose rules let strangers read or change data they shouldn't
- Side doorA way to reach your database without going through your website's forms, using the public settings directly
- SpamUnwanted messages or form submissions, usually sent by bots in bulk
- VulnerabilityA security hole in a package or a setting. Fixed by updating or changing the setting