CodeSent Rules - Comprehensive API Security & Static Analysis

Info Critical Step Proxy Response

Name	Severity	Scopes	Tags	Links
JWT/JWS is decoded but not verified in the same flow phase	Critical	Step	Authentication & Authorisation	CWE-347
Request content is stringified	Critical	Step	Data Validation DoS Protection	CWE-20
Sensitive information is in the source code	Critical	Step	Data at Rest	CWE-256 CWE-312
Missing API versioning	Info	Proxy	Secure Configuration	CWE-710
Policy is not linked to step	Info	Proxy	Code Quality	CWE-561
Resource is not linked to a policy	Info	Proxy	Code Quality	CWE-561
Unused flow variables	Info	Step	Code Quality	CWE-563