# Security System

## Overview

Multi-layer security including CSRF protection, rate limiting, input validation, password hashing, and XSS prevention.

## Key Features

- CSRF protection on all forms
- Rate limiting on sensitive endpoints
- Secure password hashing (PBKDF2)
- XSS prevention via auto-escape
- SQL injection prevention
- Email verification tokens
- Password reset tokens with expiration

## Implementation

See [SECURITY.md](../SECURITY.md) for detailed security information.