CodeSent Rules - Comprehensive API Security & Static Analysis

High AssignMessage Proxy VerifyAPIKey XMLThreatProtection

Name	Severity	Scopes	Tags	Links
API Key is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
AssignMessage request parameters pollution	High	AssignMessage	Data Validation	CWE-20
Authorization header is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
Proxy doesn't have default flow	High	Proxy	Code Quality Data Validation	CWE-20
Use of weak hash algorithms	High	AssignMessage HMAC JavaScript	Secure Configuration	CWE-327