Skip to content

Improve table layouts, readability and fix typos (2025) #908

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ritorhymes wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Improve table layouts, readability and fix typos (2025) #908

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
635f7b8
Correct typos in table: remove stray slashes; Weighed -> Weighted; co…
ritorhymes Jan 8, 2026
0407f5a
Center table text and adjust padding for better fit layout
ritorhymes Jan 8, 2026
4bdf2e9
center text and prevent cell collapse in risk table
ritorhymes Jan 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 8 additions & 21 deletions 2025/docs/en/0x02_2025-What_are_Application_Security_Risks.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,52 +3,39 @@ Attackers can potentially use many different paths through your application to d

![Calculation diagram](../assets/2025-algorithm-diagram.png)

<table>
<table class="table-base table-risk">
<tr>
<td>
<strong>Threat Agents</strong>
</td>
<td>
<strong>Attack \
Vectors</strong>
<strong>Attack Vectors</strong>
</td>
<td>
<strong>Exploitability</strong>
</td>
<td>
<strong>Likelihood of Missing Security</strong>
<p style="text-align: center">

<strong>Controls</strong>
<strong>Likelihood of Missing Security Controls</strong>
</td>
<td>
<strong>Technical</strong>
<p style="text-align: center">

<strong>Impacts</strong>
<strong>Technical Impacts</strong>
</td>
<td>
<strong>Business</strong>
<p style="text-align: center">

<strong>Impacts</strong>
<strong>Business Impacts</strong>
</td>
</tr>
<tr>
<td>
<strong>By environment, \
dynamic by situation picture</strong>
<strong>By environment, dynamic by situation picture</strong>
</td>
<td>
<strong>By Application exposure (by environment</strong>
<strong>By Application exposure (by environment)</strong>
</td>
<td>
<strong>Avg Weighted Exploit</strong>
</td>
<td>
<strong>Missing Controls \
by average Incidence rate \
Weighed by coverage</strong>
<strong>Missing Controls by average Incidence rate Weighted by coverage</strong>
</td>
<td>
<strong>Avg Weighted Impact</strong>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A01_2025-Broken_Access_Control.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Maintaining its position at #1 in the Top Ten, 100% of the applications tested w
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A02_2025-Security_Misconfiguration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Moving up from #5 in the previous edition, 100% of the applications tested were
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A03_2025-Software_Supply_Chain_Failures.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ This was top-ranked in the Top 10 community survey with exactly 50% respondents
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A04_2025-Cryptographic_Failures.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Moving down two positions to #4, this weakness focuses on failures related to th
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A05_2025-Injection.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Injection falls two spots from #3 to #5 in the ranking, maintaining its position
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A06_2025-Insecure_Design.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Insecure Design slides two spots from #4 to #6 in the ranking as **[A02:2025-Sec
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A07_2025-Authentication_Failures.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Authentication Failures maintains its position at #7 with a slight name change t
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A08_2025-Software_or_Data_Integrity_Failures.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Software or Data Integrity Failures continues at #8, with a slight, clarifying n
## Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A09_2025-Security_Logging_and_Alerting_Failures.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Security Logging & Alerting Failures retains its position at #9. This category h
## Score table.


<table>
<table >
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/A10_2025-Mishandling_of_Exceptional_Conditions.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Notable CWEs included in this category: *CWE-209 Generation of Error Message Con
## Score table.


<table>
<table >
<tr>
<td>CWEs Mapped
</td>
Expand Down
2 changes: 1 addition & 1 deletion 2025/docs/en/X01_2025-Next_Steps.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ This is a renaming of 2021’s Denial of Service. That was renamed as it describ
### Score table.


<table>
<table class="table-base">
<tr>
<td>CWEs Mapped
</td>
Expand Down
33 changes: 33 additions & 0 deletions 2025/docs/stylesheets/extra.css
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
.table-base {
text-align: center;
display: inline-block;
font-size: .64rem;
max-width: 100%;
overflow: auto;
touch-action: auto;
border-radius: .1rem;
border: .05rem solid var(--md-typeset-table-color);
border-collapse: collapse;
}

.table-base td,
.table-base th {
padding: 12px;
border: .05rem solid var(--md-typeset-table-color);
}

.table-base tbody tr {
transition: background-color 125ms;
}

.table-base tbody tr:hover {
background-color: var(--md-typeset-table-color--light);
box-shadow: 0 .05rem 0 var(--md-default-bg-color) inset;
}

@media (max-width: 800px) {
.table-risk td,
.table-risk th {
min-width: 150px;
}
}
4 changes: 4 additions & 0 deletions 2025/mkdocs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,6 +74,10 @@ plugins:
include_dir: '../osib/include'
verbose: false # debug
on_error_fail: true

extra_css:
- stylesheets/extra.css

extra:
alternate: # see https://squidfunk.github.io/mkdocs-material/setup/changing-the-language/#site-language-selector
- name: en - English
Expand Down