What security standards are required for the site?

Question

symfony

What security standards are required for a site on Symfony and in general in 2018?

Answer 1

According to the OWASP site, SQL Injection is still number one.
doc: https://www.owasp.org/index.php/Top_10-2017_Top_10
Specifically for symphony, if you use your custom forms that are not from symphony, you need to add a CSRF token. You also need to be vigilant with SQL queries with concatenation (it's better not to use concatenation at all, and use prepared statements) if you use it with native sql. Symphony also has a command php bin/console security:checkthat checks for known vulnerabilities in dependencies.