Semgrep Rules

Safeack's Security Rules Repo

Rules

Python - Django/DRF

Visit Rules Dir

• Missing/Broken Authentication
• BOLA
• BOPLA
• setattr (BOPLA/RCE attack vector)
• getattr (BOPLA/RCE attack vector)
• SQLi
• Directory Traversal (read and write types)
• Unrestricted file upload checks
• Broken Permission Implementation
• Missing Authorization

React

• XSS attack vectors