diff options
Diffstat (limited to 'app/serializers/README.md')
| -rw-r--r-- | app/serializers/README.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/app/serializers/README.md b/app/serializers/README.md index d83c2061e0b..6bab3c83e1b 100644 --- a/app/serializers/README.md +++ b/app/serializers/README.md @@ -22,6 +22,10 @@ Using serializers, instead of `to_json` method, has several benefits: * it makes it easier to reduce merge conflicts between CE -> EE * it makes it easier to benefit from domain driven development techniques +## Security considerations + +Consult the `Serialization` section of our [Secure Coding Guidelines](../../doc/development/secure_coding_guidelines.md#serialization) to help avoiding leaking sensitive attributes when using serializers. + ## What is a serializer? A serializer is a class that encapsulates all business rules for building a |