How do I secure UI code generated by v0.dev?

Start by adding server-side validation for every form and input that v0 generated on the client side. Implement authentication and authorization checks on all API routes and server actions that the UI components interact with. Add Content Security Policy headers to prevent XSS attacks and set secure cookie attributes for any session management. Review generated code for any use of dangerouslySetInnerHTML, unvalidated URL construction, or direct DOM manipulation that could introduce vulnerabilities. UNPWNED checks the externally observable header, cookie, exposure, endpoint, dependency, form, CORS, rate-limit, and error-disclosure portions. Paid reports add implementation guidance for completed findings; internal controls require direct review.