Application Security
CWE-112 Missing XML Validation: Check Documents Against a Schema
Accepting XML without validating it against a schema or DTD leaves the door open for unexpected input. CWE-112 explained, with a fix.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-1119 Excessive Use of Unconditional Branching (goto)
Too many goto jumps make control flow hard to follow and audit. What CWE-1119 means, when goto is acceptable, and how to restructure.
Oct 18, 20262 min read
Application Security
CWE-1118 Insufficient Documentation of Error Handling Techniques
If nobody documented how errors are handled, callers guess. A short look at CWE-1118 and what error handling docs should cover.
Oct 18, 20262 min read
Application Security
CWE-1117 Callable with Insufficient Behavioral Summary
Functions whose signature and docs hide inputs, side effects or return codes invite misuse. What CWE-1117 means and how to write a useful summary.
Oct 18, 20262 min read
Application Security
CWE-1116 Inaccurate Source Code Comments: A Review Hazard
A comment that says one thing while the code does another misleads reviewers. CWE-1116 explained, with a simple example and practical habits.
Oct 18, 20263 min read
Application Security
CWE-1115 Source Code Element without Standard Prologue
Files with no consistent header are slower to understand and audit. What CWE-1115 means and what a useful prologue contains.
Oct 18, 20262 min read
Application Security
CWE-1114 Inappropriate Whitespace Style and the goto fail Bug
Misleading indentation can hide a control flow bug from a human reviewer. CWE-1114, the Apple goto fail case from MITRE, and how to guard against it.
Oct 18, 20263 min read
Application Security
CWE-1113 Inappropriate Comment Style: A Quality Weakness Explained
Inconsistent comment formats make code harder to read and review. What CWE-1113 means and how to enforce a comment standard.
Oct 18, 20262 min read
Application Security
CWE-1112 Incomplete Documentation of Program Execution
Undocumented environment variables, flags and config keys change how a program runs. What CWE-1112 covers and how to document execution controls.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.