OWASP/CheatSheetSeries

Pattern Findings

20 matches across 6 categories. Click a row to expand file-level details.

Hallucination Indicators3 hits · 30 pts

Severity	File	Line	Snippet
CRITICAL	cheatsheets/Error_Handling_Cheat_Sheet.md	39	org.apache.struts2.interceptor.debugging.DebuggingInterceptor.intercept(DebuggingInterceptor.java:256)
CRITICAL	cheatsheets/XML_Security_Cheat_Sheet.md	845	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1459)
CRITICAL	cheatsheets/XML_Security_Cheat_Sheet.md	846	at com.sun.org.apache.xerces.internal.impl.XMLEntityManager.setupCurrentEntity(XMLEntityManager.java:674)

Over-Commented Block6 hits · 6 pts

Severity	File	Line	Snippet
LOW	mkdocs.yml	21	lang:
LOW	…s/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.md	921	.find(cookie => cookie.startsWith(`${cookieName}=`));
LOW	…s/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.md	941	// // CSRF token is automatically added
LOW	…s/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.md	1041
LOW	…atsheets/XML_External_Entity_Prevention_Cheat_Sheet.md	261	try {
LOW	cheatsheets/C-Based_Toolchain_Hardening_Cheat_Sheet.md	221	In addition to `NDEBUG` (Release) and `DEBUG` (Debug), you have two additional cross products: both are defined or neith

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet
HIGH	CONTRIBUTING.md	144	Templates for all issues and pull requests must be used, otherwise it suggests that they have been generated by AI witho

Excessive Try-Catch Wrapping4 hits · 4 pts

Severity	File	Line	Snippet
LOW	cheatsheets/Multi_Tenant_Security_Cheat_Sheet.md	206	except Exception:
LOW	cheatsheets/Multi_Tenant_Security_Cheat_Sheet.md	748	except Exception as e:
LOW	…/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.md	220	except Exception as e:
LOW	…/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.md	226	except Exception as e:

Hyper-Verbose Identifiers4 hits · 3 pts

Severity	File	Line	Snippet
LOW	scripts/Update_CheatSheets_Index.py	14	def extract_languages_snippet_provided(cheatsheet):
LOW	cheatsheets/Cookie_Theft_Mitigation_Cheat_Sheet.md	93	function cookieTheftDetectionMiddleware(req, res) {
LOW	cheatsheets/AI_Agent_Security_Cheat_Sheet.md	296	def validate_no_sensitive_data(cls, v):
LOW	cheatsheets/AI_Agent_Security_Cheat_Sheet.md	333	def _detect_exfiltration_attempt(self, output: dict) -> bool:

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet
LOW	…heets/Browser_Extension_Vulnerabilities_Cheat_Sheet.md	219	name: "Jane Doe",
LOW	cheatsheets/JSON_Web_Token_for_Java_Cheat_Sheet.md	41	"name": "John Doe",