Add code review checklist about nodegoat HOT 2 OPEN

I've published this some time ago: https://github.com/Feeld/strong-node

We had zero feedback from the community, so I think it would be good to move it to here. Moreover I don't work in this company now, but we can fork it due to the license. And I'm sure they are not going to have any problem in removing it when the new one gains traction.

If you agree, I can start with a PR and we all can add/change stuff there. It's only written (and reviewed) by me, which has no sense in a project of this type.

:)

from nodegoat.

Any more ideas around this @ckarande ? There are a bunch of ideas in my book here: https://leanpub.com/holistic-infosec-for-web-developers/read#process-and-practises-agile-development-and-practices , not sure that's what you mean though. Perhaps the Web Applications chapter may be helpful: https://leanpub.com/holistic-infosec-for-web-developers-fascicle1-vps-network-cloud-webapplications/read#leanpub-auto-ssm-identify-risks-2

from nodegoat.