Rule Explorer

URL scheme validation throws a generic Error instead of a project-specific error class (such as ActionableError). In highly specific framework environments, generic exceptions might not be properly handled, routed, or surfaced to the client, which can cause security validation failures to be silently suppressed or incorrectly processed.

TSCVE-2026-35394CWE-390CWE-754

Returning an unassigned `err` variable inside an empty collection or nil check (`len(x) == 0` or `x == nil`) often results in inadvertently returning `nil` when a failure was intended. Ensure that you explicitly create and return a new error using `fmt.Errorf` or `errors.New` if this logic path represents a failure state.

GoCVE-2025-25204CWE-390