CodeSent Rules - Comprehensive API Security & Static Analysis

Low High RouteRule OAuthV2 Proxy

Name	Severity	Scopes	Tags	Links
API Key is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
Authorization header is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
Proxy doesn't have default flow	High	Proxy	Code Quality Data Validation	CWE-20
Missing security headers	Low	Proxy	Secure Configuration	CWE-523
No mask configuration for the proxy	Low	Proxy	Code Quality
Overcomplicated or malformed condition	Low	Step RouteRule Flow	Code Quality	CWE-570 CWE-571