Ivan Grynenko - Drupal Cursor Rules

Source: Ivan Grynenko - Cursor Rules Author: Ivan Grynenko License: MIT

When This Skill Activates

Activates when working with Drupal security topics including:

• Authentication and session management

• Access control and permissions

• SQL injection and XSS prevention

• Cryptography and data protection

• Security configuration

• Dependency management

• SSRF prevention

• Secure design patterns

• Software integrity

• Security logging and monitoring

Available Topics

All topics are available as references in the /references/ directory.

Each reference contains:

• OWASP classification and reference

• Security patterns and anti-patterns

• Enforcement checks

• Code examples

• Best practices

OWASP Top 10 Coverage

• @references/authentication-security.md - Authentication failures (A07:2021)

• @references/access-control-security.md - Broken access control (A01:2021)

• @references/injection-prevention.md - Injection vulnerabilities (A03:2021)

• @references/data-security.md - Cryptographic failures (A02:2021)

• @references/security-configuration.md - Security misconfiguration (A05:2021)

• @references/dependency-security.md - Vulnerable components (A06:2021)

• @references/ssrf-prevention.md - Server-side request forgery (A10:2021)

• @references/secure-design.md - Insecure design (A04:2021)

• @references/integrity-validation.md - Software integrity failures (A08:2021)

• @references/logging-security.md - Logging and monitoring failures (A09:2021)

Additional Security Topics

• @references/database-standards.md - Database best practices

• @references/file-permissions.md - File security and access control

See /references/ directory for complete list.

To update: Run .claude/scripts/sync-ivan-rules.sh