General Secure Coding Practices
Even with all the security controls that Salesforce B2C Commerce provides, poor coding practices can negate these controls and introduce weaknesses. Please refer to the OWASP Secure Coding Practices - Quick Reference Guide for general recommendations.