CodeSent Rules - Comprehensive API Security & Static Analysis

High Flow Proxy SpikeArrest XMLThreatProtection

Name	Severity	Scopes	Tags	Links
API Key is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
Authorization header is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
Flow accepts confidential data as URL parameters	High	Flow PreFlow	Data in Transit	CWE-598
JSONThreatProtection policy is not applied to a request body with JSON type	High	Flow	Data Validation	CWE-502 CWE-20
Proxy doesn't have default flow	High	Proxy	Code Quality Data Validation	CWE-20
SpikeArrest policy doesn't use any identifier	High	SpikeArrest	DoS Protection	CWE-770