Hands-on secure code review
Code review is a skill.
Practice it.
Build the instinct that catches vulnerabilities in review.
Loading the weekly featured challenge…
Build the instinct that catches vulnerabilities in review.
Build the instinct that catches vulnerabilities before they ship. Review realistic production code, choose the vulnerable line, and learn from the explanation.
ShelfMate is an e-book lending platform built with Flask where members borrow titles and librarians manage the catalog and member roles. After login the server issues a JWT carrying the user id and an is_librarian claim, and a helper reads that claim on every request to gate the librarian dashboard. Review how the token is decoded and trusted in the request middleware to make sure the claims can actually be believed.
“We dropped Code Review Lab into our security training rotation. Two weeks later our engineers were catching things in PR review we'd historically missed.”
This week's featured challenge takes about 15 minutes.