Skip to content

Scan rule · RSC-SEC-064

Access check runs after the write

SecuritySeverity: HighCWE-862OWASP A01-2021

Compares the position of the auth call and the database write within the same function body and reports checks that happen after the write.

Scan tier

Source code from source mapsRepo access (deep scan)

How to fix it

Move the auth call and its bail-out to the top of the function, ahead of every write.

Scan your own app for free

More rules in this dimension

RSC-SEC-001

No end-to-end HTTPS

RSC-SEC-002

HSTS header missing

RSC-SEC-003

No Content-Security-Policy

RSC-SEC-004

MIME sniffing not disabled

RSC-SEC-005

No clickjacking protection

RSC-SEC-006

CORS wildcard on the public document