3. Don't hardcode strings that should be internationalized
4. Don't skip validation in form processing
5. Don't log sensitive data (passwords, tokens, credentials)

### Common Files to Check
| Task | Files to Review |
|------|-----------------|
| Add admin feature | `app/web/admin/*/`, `app/service/`, `webapp/WEB-INF/view/admin/` |
| Add API endpoint | `api/`, `app/web/api/` |

---

## Migration Checklist

Use this checklist to ensure a complete migration:

### Pre-Migration

- [ ] Assess current search system (document count, size, sources)
- [ ] Review infrastructure requirements
- [ ] Install and configure Fess (version: ______)
- [ ] Install compatible OpenSearch/Elasticsearch
- [ ] Backup current search system configuration
- [ ] Backup current search indices/documents