Code Security
Domain: Code Generation
π― Motivation
Ensuring generated code is secure: no SQL injection, no XSS, proper authentication, encrypted data.
π Concrete Example
Model checks: βThis code uses string formatting for SQL queries - SQL injection risk! Fix: use parameterized queries: cursor.execute(βSELECT * FROM users WHERE id = %sβ, (user_id,))β
π Analogy
A security guard checking a building - they look for unlocked doors, broken windows, blind spots. Code security checks for vulnerabilities that hackers could exploit.