Code Security

Domain: Code Generation

🎯 Motivation

Ensuring generated code is secure: no SQL injection, no XSS, proper authentication, encrypted data.

πŸ“‹ Concrete Example

Model checks: β€˜This code uses string formatting for SQL queries - SQL injection risk! Fix: use parameterized queries: cursor.execute(β€œSELECT * FROM users WHERE id = %s”, (user_id,))’

πŸ”— Analogy

A security guard checking a building - they look for unlocked doors, broken windows, blind spots. Code security checks for vulnerabilities that hackers could exploit.