admin-rbac
01Cursor rule Cursor
Requires explicit role assertion before executing admin-scoped operations. Prevents privilege escalation and BFLA vulnerabilities.
not rated 21
changed 23d ago A 196 tokens
original MIT
21Stars on the repository
12Mods indexed here, across every type
23d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Cursor rule Cursor
Enforces authentication middleware on all API route handlers. Applies to Express, FastAPI, Django, Spring, Go Gin.
not rated 21
changed 23d ago A 247 tokens
original MIT
Cursor rule Cursor
Prevents leaking internal error details, stack traces, or database error messages in API responses.
not rated 21 23d ago A 197 tokens
original MIT
Cursor rule Cursor
Requires validation of all user-supplied input before use. Prevents injection, unexpected types, and missing required fields.
not rated 21
changed 23d ago A 229 tokens
original MIT
Cursor rule Cursor
Requires ownership validation on any endpoint that accesses database records by user-supplied ID. Prevents BOLA/IDOR vulnerabilities.
not rated 21
changed 23d ago A 199 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: