find-bugs

原文涵盖的主题

• Find Bugs
• Phase 1: Complete Input Gathering
• Phase 2: Attack Surface Mapping
• Phase 3: Security Checklist (check EVERY item for EVERY file)
• Phase 4: Verification
• Phase 5: Pre-Conclusion Audit
• Output Format

Review changes on this branch for bugs, security vulnerabilities, and code quality issues. 1. Get the FULL diff: git diff master...HEAD 2. If output is truncated, read each changed file individually until you have seen every changed line 3. List all files modified in this branch before proceeding For each changed file, identify and list: All user inputs (request params, headers, body, URL components) All database queries All authentication/authorization checks All session/state operations All external calls All cryptographic operations [ ] Injection: SQL, command, template, header injection [ ] XSS: All outputs in templates properly escaped? [ ] Authentication: Auth checks on all protected operations? [ ] Authorization/IDOR: Access control verified, not just auth? [ ] CSRF: State-changing operations protected? [ ] Race conditions: TOCTOU in any read-then-write patterns? [ ] Session: Fixation, expiration, secure flags? [ ] Cryptography: Secure random, proper algorithms, no secrets in logs? [ ] Information disclosure: Error messages, logs, timing attacks? [ ] DoS: Unbounded operations, missing rate limits, resource exhaustion? [ ] Business logic: Edge cases, state machine violations,

这里只展示节选，请以完整原文和当前要求为准。