We’ve just added a new blog post about Security Hotspot review:
By some quirk of fate or architecture, there are four doors into my moderately-sized ranch house. That’s four distinct points where an attacker or thief could stroll into my home and wreak havoc. If I know every door is locked, I can sleep soundly. But are they? All of them? I can’t be sure until I’ve checked. So every night before bed, I go to each door and check its lock.
Security Hotspots in your code are like the doors in my house; they’re places where it might be possible for an attacker to enter. And they need to be double-checked by a human - fortunately not every night! - to make sure they’re not leaving the door open to attack…