Protected sessions
PIONX keeps authenticated browser sessions in encrypted HttpOnly cookies rather than exposing long-lived access or refresh tokens to normal page JavaScript. State-changing authenticated requests are checked against the same site before they are accepted.
Server-side access control
Authenticated API operations verify the active user on the server. Administrative diagnostics and privileged actions require a server-validated administrator role, not only a hidden navigation item.
Uploads and remote media
Image uploads are constrained by file size, decoded image dimensions and content validation. Server-side remote media retrieval is restricted to HTTPS destinations with network and response-size safeguards. Provider credentials remain server-side.
Abuse and browser protection
Security headers, a restrictive script policy, request rate controls, private error handling and non-executable upload/output directories provide additional layers against common web attacks and service abuse.
Practical security
No security program can guarantee absolute protection. PIONX uses layered controls and treats authentication, authorization, input safety, privacy and operational monitoring as ongoing release requirements.