---
title: "The OWASP Top 10, for Vue developers · vuejs.school"
description: "Five habits that prevent most web security bugs, then the OWASP Top 10:2025 mapped onto the places in a Nuxt app where each risk lives."
canonical_url: "https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers"
meta:
  "og:description": "Five habits that prevent most web security bugs, then the OWASP Top 10:2025 mapped onto the places in a Nuxt app where each risk lives."
  "og:image": "https://vuejs.school/_og/d/a_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJzIMK3IHZ1ZWpzLnNjaG9vbA%2Cc_OgCard.takumi%2Ctitle_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJz%2Cdescription_~Rml2ZSBoYWJpdHMgdGhhdCBwcmV2ZW50IG1vc3Qgd2ViIHNlY3VyaXR5IGJ1Z3MsIHRoZW4gdGhlIE9XQVNQIFRvcCAxMDoyMDI1IG1hcHBlZCBvbnRvIHRoZSBwbGFjZXMgaW4gYSBOdXh0IGFwcCB3aGVyZSBlYWNoIHJpc2sgbGl2ZXMu%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gMSBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS90aGUtb3dhc3AtdG9wLTEwLWZvci12dWUtZGV2ZWxvcGVycyI%2Cs_dg-Kxy-LkbG_-yy_.png"
  "og:image:alt": "The OWASP Top 10, for Vue developers · vuejs.school"
  "og:image:height": "600"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "The OWASP Top 10, for Vue developers · vuejs.school"
  "twitter:image": "https://vuejs.school/_og/d/a_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJzIMK3IHZ1ZWpzLnNjaG9vbA%2Cc_OgCard.takumi%2Ctitle_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJz%2Cdescription_~Rml2ZSBoYWJpdHMgdGhhdCBwcmV2ZW50IG1vc3Qgd2ViIHNlY3VyaXR5IGJ1Z3MsIHRoZW4gdGhlIE9XQVNQIFRvcCAxMDoyMDI1IG1hcHBlZCBvbnRvIHRoZSBwbGFjZXMgaW4gYSBOdXh0IGFwcCB3aGVyZSBlYWNoIHJpc2sgbGl2ZXMu%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gMSBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS90aGUtb3dhc3AtdG9wLTEwLWZvci12dWUtZGV2ZWxvcGVycyI%2Cs_dg-Kxy-LkbG_-yy_.png"
  "twitter:image:alt": "The OWASP Top 10, for Vue developers · vuejs.school"
---

> Index of every page on this site: [llms.txt](https://vuejs.school/llms.txt)

# **The OWASP Top 10, for Vue developers**

Five habits that prevent most web security bugs, then the OWASP Top 10:2025 mapped onto the places in a Nuxt app where each risk lives.

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://vuejs.school/#website","@type":"WebSite","description":"A free AI-instructed school for Vue.js. Short tutorials, runnable code and quizzes that adapt to you.","name":"vuejs.school","url":"https://vuejs.school/","publisher":{"@id":"https://vuejs.school/#identity"}},{"@id":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers#webpage","@type":"WebPage","description":"Five habits that prevent most web security bugs, then the OWASP Top 10:2025 mapped onto the places in a Nuxt app where each risk lives.","name":"The OWASP Top 10, for Vue developers","url":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers","breadcrumb":{"@id":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers#breadcrumb"},"isPartOf":{"@id":"https://vuejs.school/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers"]}],"primaryImageOfPage":{"@id":"https://vuejs.school/#logo"}},{"@id":"https://vuejs.school/#identity","@type":"Organization","description":"A free AI-instructed school for Vue.js. Short tutorials, runnable code and quizzes that adapt to you.","name":"vuejs.school","url":"https://vuejs.school","logo":{"@id":"https://vuejs.school/#logo"}},{"@id":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers#article","description":"Five habits that prevent most web security bugs, then the OWASP Top 10:2025 mapped onto the places in a Nuxt app where each risk lives.","headline":"The OWASP Top 10, for Vue developers","inLanguage":"en","isAccessibleForFree":true,"thumbnailUrl":"https://vuejs.school/_og/d/a_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJzIMK3IHZ1ZWpzLnNjaG9vbA%2Cc_OgCard.takumi%2Ctitle_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJz%2Cdescription_~Rml2ZSBoYWJpdHMgdGhhdCBwcmV2ZW50IG1vc3Qgd2ViIHNlY3VyaXR5IGJ1Z3MsIHRoZW4gdGhlIE9XQVNQIFRvcCAxMDoyMDI1IG1hcHBlZCBvbnRvIHRoZSBwbGFjZXMgaW4gYSBOdXh0IGFwcCB3aGVyZSBlYWNoIHJpc2sgbGl2ZXMu%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gMSBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS90aGUtb3dhc3AtdG9wLTEwLWZvci12dWUtZGV2ZWxvcGVycyI%2Cs_dg-Kxy-LkbG_-yy_.png","@type":["Article","TechArticle"],"articleSection":["Security"],"author":{"@id":"https://vuejs.school/#identity"},"image":{"@id":"https://vuejs.school/#/schema/image/1"},"isPartOf":{"@id":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers#webpage"},"keywords":["OWASP Top 10:2025","checks on the server","runtimeConfig.public","ASVS 5.0"],"mainEntityOfPage":{"@id":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers#webpage"},"publisher":{"@id":"https://vuejs.school/#identity"}},{"@id":"https://vuejs.school/learn/security/the-owasp-top-10-for-vue-developers#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Skill tree","item":"https://vuejs.school/track","position":1},{"@type":"ListItem","name":"Security & OWASP","item":"https://vuejs.school/track/security","position":2},{"@type":"ListItem","name":"The OWASP Top 10, for Vue developers","position":3}]},{"@id":"https://vuejs.school/#logo","@type":"ImageObject","caption":"vuejs.school","contentUrl":"https://vuejs.school/apple-touch-icon.png","inLanguage":"en","url":"https://vuejs.school/apple-touch-icon.png"},{"@id":"https://vuejs.school/#/schema/image/1","@type":"ImageObject","contentUrl":"https://vuejs.school/_og/d/a_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJzIMK3IHZ1ZWpzLnNjaG9vbA%2Cc_OgCard.takumi%2Ctitle_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJz%2Cdescription_~Rml2ZSBoYWJpdHMgdGhhdCBwcmV2ZW50IG1vc3Qgd2ViIHNlY3VyaXR5IGJ1Z3MsIHRoZW4gdGhlIE9XQVNQIFRvcCAxMDoyMDI1IG1hcHBlZCBvbnRvIHRoZSBwbGFjZXMgaW4gYSBOdXh0IGFwcCB3aGVyZSBlYWNoIHJpc2sgbGl2ZXMu%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gMSBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS90aGUtb3dhc3AtdG9wLTEwLWZvci12dWUtZGV2ZWxvcGVycyI%2Cs_dg-Kxy-LkbG_-yy_.png","inLanguage":"en","url":"https://vuejs.school/_og/d/a_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJzIMK3IHZ1ZWpzLnNjaG9vbA%2Cc_OgCard.takumi%2Ctitle_~VGhlIE9XQVNQIFRvcCAxMCwgZm9yIFZ1ZSBkZXZlbG9wZXJz%2Cdescription_~Rml2ZSBoYWJpdHMgdGhhdCBwcmV2ZW50IG1vc3Qgd2ViIHNlY3VyaXR5IGJ1Z3MsIHRoZW4gdGhlIE9XQVNQIFRvcCAxMDoyMDI1IG1hcHBlZCBvbnRvIHRoZSBwbGFjZXMgaW4gYSBOdXh0IGFwcCB3aGVyZSBlYWNoIHJpc2sgbGl2ZXMu%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gMSBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS90aGUtb3dhc3AtdG9wLTEwLWZvci12dWUtZGV2ZWxvcGVycyI%2Cs_dg-Kxy-LkbG_-yy_.png"}]}
```