From 635f7b831bb041eedf6ddf865fa039dad5367945 Mon Sep 17 00:00:00 2001 From: Rito Rhymes <83614463+ritorhymes@users.noreply.github.com> Date: Wed, 7 Jan 2026 23:59:25 -0500 Subject: [PATCH 1/3] Correct typos in table: remove stray slashes; Weighed -> Weighted; consolidate td content; closing parantheses --- ...025-What_are_Application_Security_Risks.md | 27 +++++-------------- 1 file changed, 7 insertions(+), 20 deletions(-) diff --git a/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md b/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md index df1e9d066..b363d6374 100644 --- a/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md +++ b/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md @@ -9,46 +9,33 @@ Attackers can potentially use many different paths through your application to d Threat Agents - Attack \ -Vectors + Attack Vectors Exploitability - Likelihood of Missing Security -

- - Controls + Likelihood of Missing Security Controls - Technical -

- - Impacts + Technical Impacts - Business -

- - Impacts + Business Impacts - By environment, \ -dynamic by situation picture + By environment, dynamic by situation picture - By Application exposure (by environment + By Application exposure (by environment) Avg Weighted Exploit - Missing Controls \ -by average Incidence rate \ -Weighed by coverage + Missing Controls by average Incidence rate Weighted by coverage Avg Weighted Impact From 0407f5ada41c1a9dd7eab795df464b2143a1a2d2 Mon Sep 17 00:00:00 2001 From: Rito Rhymes <83614463+ritorhymes@users.noreply.github.com> Date: Thu, 8 Jan 2026 00:44:26 -0500 Subject: [PATCH 2/3] Center table text and adjust padding for better fit layout add css override file and re-apply mkdoc defaults plus custom stylings --- .../docs/en/A01_2025-Broken_Access_Control.md | 2 +- .../en/A02_2025-Security_Misconfiguration.md | 2 +- ...A03_2025-Software_Supply_Chain_Failures.md | 2 +- .../en/A04_2025-Cryptographic_Failures.md | 2 +- 2025/docs/en/A05_2025-Injection.md | 2 +- 2025/docs/en/A06_2025-Insecure_Design.md | 2 +- .../en/A07_2025-Authentication_Failures.md | 2 +- ...025-Software_or_Data_Integrity_Failures.md | 2 +- ...-Security_Logging_and_Alerting_Failures.md | 2 +- ...5-Mishandling_of_Exceptional_Conditions.md | 2 +- 2025/docs/en/X01_2025-Next_Steps.md | 2 +- 2025/docs/stylesheets/extra.css | 26 +++++++++++++++++++ 2025/mkdocs.yml | 4 +++ 13 files changed, 41 insertions(+), 11 deletions(-) create mode 100644 2025/docs/stylesheets/extra.css diff --git a/2025/docs/en/A01_2025-Broken_Access_Control.md b/2025/docs/en/A01_2025-Broken_Access_Control.md index 575192150..c5c7ecf90 100644 --- a/2025/docs/en/A01_2025-Broken_Access_Control.md +++ b/2025/docs/en/A01_2025-Broken_Access_Control.md @@ -10,7 +10,7 @@ Maintaining its position at #1 in the Top Ten, 100% of the applications tested w ## Score table. - +
diff --git a/2025/docs/en/A02_2025-Security_Misconfiguration.md b/2025/docs/en/A02_2025-Security_Misconfiguration.md index 9dfcf4d17..2a0d27452 100644 --- a/2025/docs/en/A02_2025-Security_Misconfiguration.md +++ b/2025/docs/en/A02_2025-Security_Misconfiguration.md @@ -9,7 +9,7 @@ Moving up from #5 in the previous edition, 100% of the applications tested were ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md b/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md index 25e70baac..6e0994ddc 100644 --- a/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md +++ b/2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md @@ -9,7 +9,7 @@ This was top-ranked in the Top 10 community survey with exactly 50% respondents ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A04_2025-Cryptographic_Failures.md b/2025/docs/en/A04_2025-Cryptographic_Failures.md index d81a20b8f..d0d610234 100644 --- a/2025/docs/en/A04_2025-Cryptographic_Failures.md +++ b/2025/docs/en/A04_2025-Cryptographic_Failures.md @@ -11,7 +11,7 @@ Moving down two positions to #4, this weakness focuses on failures related to th ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A05_2025-Injection.md b/2025/docs/en/A05_2025-Injection.md index d72e4a3b4..7d815a164 100644 --- a/2025/docs/en/A05_2025-Injection.md +++ b/2025/docs/en/A05_2025-Injection.md @@ -8,7 +8,7 @@ Injection falls two spots from #3 to #5 in the ranking, maintaining its position ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A06_2025-Insecure_Design.md b/2025/docs/en/A06_2025-Insecure_Design.md index aaf212113..a39750380 100644 --- a/2025/docs/en/A06_2025-Insecure_Design.md +++ b/2025/docs/en/A06_2025-Insecure_Design.md @@ -9,7 +9,7 @@ Insecure Design slides two spots from #4 to #6 in the ranking as **[A02:2025-Sec ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A07_2025-Authentication_Failures.md b/2025/docs/en/A07_2025-Authentication_Failures.md index 2d3077107..caec3d243 100644 --- a/2025/docs/en/A07_2025-Authentication_Failures.md +++ b/2025/docs/en/A07_2025-Authentication_Failures.md @@ -9,7 +9,7 @@ Authentication Failures maintains its position at #7 with a slight name change t ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md b/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md index 6c465c9b0..10d430fc9 100644 --- a/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md +++ b/2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md @@ -8,7 +8,7 @@ Software or Data Integrity Failures continues at #8, with a slight, clarifying n ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md b/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md index 630f0fb74..b8eb68c7e 100644 --- a/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md +++ b/2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md @@ -9,7 +9,7 @@ Security Logging & Alerting Failures retains its position at #9. This category h ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md b/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md index 6fdb956e4..3dfa3f541 100644 --- a/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md +++ b/2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md @@ -11,7 +11,7 @@ Notable CWEs included in this category: *CWE-209 Generation of Error Message Con ## Score table. -
CWEs Mapped
+
diff --git a/2025/docs/en/X01_2025-Next_Steps.md b/2025/docs/en/X01_2025-Next_Steps.md index 49d350e68..1cec05a84 100644 --- a/2025/docs/en/X01_2025-Next_Steps.md +++ b/2025/docs/en/X01_2025-Next_Steps.md @@ -15,7 +15,7 @@ This is a renaming of 2021’s Denial of Service. That was renamed as it describ ### Score table. -
CWEs Mapped
+
diff --git a/2025/docs/stylesheets/extra.css b/2025/docs/stylesheets/extra.css new file mode 100644 index 000000000..d4471a613 --- /dev/null +++ b/2025/docs/stylesheets/extra.css @@ -0,0 +1,26 @@ +.table-base { + text-align: center; + display: inline-block; + font-size: .64rem; + max-width: 100%; + overflow: auto; + touch-action: auto; + border-radius: .1rem; + border: .05rem solid var(--md-typeset-table-color); + border-collapse: collapse; +} + +.table-base td, +.table-base th { + padding: 12px; + border: .05rem solid var(--md-typeset-table-color); +} + +.table-base tbody tr { + transition: background-color 125ms; +} + +.table-base tbody tr:hover { + background-color: var(--md-typeset-table-color--light); + box-shadow: 0 .05rem 0 var(--md-default-bg-color) inset; +} diff --git a/2025/mkdocs.yml b/2025/mkdocs.yml index 35bee0cc0..5938966ca 100644 --- a/2025/mkdocs.yml +++ b/2025/mkdocs.yml @@ -74,6 +74,10 @@ plugins: include_dir: '../osib/include' verbose: false # debug on_error_fail: true + +extra_css: + - stylesheets/extra.css + extra: alternate: # see https://squidfunk.github.io/mkdocs-material/setup/changing-the-language/#site-language-selector - name: en - English From 4bdf2e94b43ee83fe0d13e5b29d39186b67d13db Mon Sep 17 00:00:00 2001 From: Rito Rhymes <83614463+ritorhymes@users.noreply.github.com> Date: Thu, 8 Jan 2026 00:49:26 -0500 Subject: [PATCH 3/3] center text and prevent cell collapse in risk table --- .../en/0x02_2025-What_are_Application_Security_Risks.md | 2 +- 2025/docs/stylesheets/extra.css | 7 +++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md b/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md index b363d6374..dec3ea7e6 100644 --- a/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md +++ b/2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md @@ -3,7 +3,7 @@ Attackers can potentially use many different paths through your application to d ![Calculation diagram](../assets/2025-algorithm-diagram.png) -
CWEs Mapped
+
Threat Agents diff --git a/2025/docs/stylesheets/extra.css b/2025/docs/stylesheets/extra.css index d4471a613..4a63086ec 100644 --- a/2025/docs/stylesheets/extra.css +++ b/2025/docs/stylesheets/extra.css @@ -24,3 +24,10 @@ background-color: var(--md-typeset-table-color--light); box-shadow: 0 .05rem 0 var(--md-default-bg-color) inset; } + +@media (max-width: 800px) { + .table-risk td, + .table-risk th { + min-width: 150px; + } +}