45. Application security
Protect Go applications against injection, path traversal, request smuggling, denial of service, weak randomness, insecure TLS, and accidental secret exposure. Apply input limits, secure defaults, dependency review, and security-focused tests.