All rules Rule family Security Rules Security rules focus on the highest-signal template-level mistakes: missing CSRF protection, raw output, unsafe links, insecure URLs, and inline JavaScript handlers. Rules 5 Auto-fixable 4 #See Also Rules Index