web-of-flaws

Web of Flaws is a structured, machine-readable library of web security flaws designed for both human developers and AI coding agents. It provides a comprehensive catalog of vulnerable web patterns, explaining why they are exploitable and offering concrete, secure code replacements. The repository is organized into key security topics, including: - Cross-origin Communication - Injection - Object Integrity - Request Authenticity - Software Supply Chain - Sensitive Data Exposure Each guide is formatted with consistent markdown structures and YAML frontmatter containing stable IDs, standards mappings, severity ratings, and detection metadata. This agent-friendly design makes it suitable for integration into SAST tools, model training datasets, RAG knowledge bases, and automated security review workflows.