Application Security
CWE-178 Improper Handling of Case Sensitivity: Risks and Fixes
When one layer treats .jsp and .JSP as different and another does not, access controls fail. A look at CWE-178 and how to avoid it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-177 Improper Handling of URL Encoding: How to Fix It
Hex encoded input such as %2e%2e can hide path traversal from a filter. How CWE-177 works and how to decode once, then validate.
Oct 18, 20262 min read
Application Security
CWE-176 Improper Handling of Unicode Encoding: Causes and Fixes
Unicode input that one layer reads differently from the next can slip past a security check. Here is how CWE-176 happens and what to do about it.
Oct 18, 20262 min read
Application Security
CWE-175 Improper Handling of Mixed Encoding: Short Guide
When one input mixes several encodings, filters often handle only one. What CWE-175 means and how to normalize before you validate.
Oct 18, 20262 min read
Application Security
CWE-174 Double Decoding of the Same Data: How It Bypasses Filters
Decode the same input twice and any check between the two steps is useless. How CWE-174 enabled code execution and traversal, and how to fix it.
Oct 18, 20265 min read
Application Security
CWE-173 Improper Handling of Alternate Encoding: A Practical Guide
The same character can be written several valid ways. If your check knows only one, attackers use another. How CWE-173 works and how to fix it.
Oct 18, 20263 min read
Application Security
CWE-172 Encoding Error: Decoding Bugs That Bypass Security Checks
Double encoding, hex paths and Unicode URLs have exposed source code and allowed traversal. How CWE-172 works and how to decode and validate safely.
Oct 18, 20265 min read
Application Security
CWE-170 Improper Null Termination in C and C++: Causes and Fixes
A string without its terminating NUL byte makes C functions read or write past the buffer. How CWE-170 happens and how to fix it.
Oct 18, 20266 min read
Application Security
CWE-168 Inconsistent Special Elements: Misordered and Unnested Input
Pairs in the wrong order or special characters that are not nested properly can crash parsers and hide activity. How to find and fix CWE-168.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.