CodeSent Rules - Comprehensive API Security & Static Analysis

Info High ServiceCallout FlowCallout Proxy

Name	Severity	Scopes	Tags	Links
API Key is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
Authorization header is not removed before the request is sent to target system	High	Proxy	Data in Transit	CWE-201
No TLS protocol specified in connection definition	High	ServiceCallout MessageLogging Target	Data in Transit	CWE-327
Proxy doesn't have default flow	High	Proxy	Code Quality Data Validation	CWE-20
Missing API versioning	Info	Proxy	Secure Configuration	CWE-710
Policy is not linked to step	Info	Proxy	Code Quality	CWE-561
Resource is not linked to a policy	Info	Proxy	Code Quality	CWE-561