<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://codecordon.up.railway.app</loc>
<lastmod>2026-07-18T06:27:33.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/shipbond</loc>
<lastmod>2026-07-18T06:27:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/shipbond/example</loc>
<lastmod>2026-07-18T06:27:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/docs/quickstart</loc>
<lastmod>2026-07-18T06:27:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.85</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/case-studies/fieldbase</loc>
<lastmod>2026-07-18T06:27:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/privacy</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/security</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/terms</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/security-scanner/lovable</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/security-scanner/cursor</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/security-scanner/bolt</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/security-scanner/v0</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/security-scanner/replit</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/sec001-hardcoded-api-key-or-credential</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/sec002-secret-assigned-as-string-literal</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/sec003-env-file-with-real-values-present-in-codebase</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/sec004-secret-exposed-to-the-browser-via-public-env-prefix</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/inj001-sql-query-built-with-string-interpolation</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/inj002-shell-command-built-from-dynamic-input</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/inj003-dynamic-code-execution-eval-new-function-exec</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/inj004-filesystem-path-built-from-request-input</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/web001-cors-allows-any-origin</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/web002-session-cookie-set-without-httponly-secure</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/web003-unsanitized-html-injection-xss</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/web004-weak-jwt-verification</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/web005-request-body-used-without-validation</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/auth001-api-route-mutates-data-without-any-auth-check</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/auth002-auth-marked-as-todo-disabled</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/auth003-hardcoded-login-credentials</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/auth004-password-stored-without-hashing</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/llm001-llm-api-called-directly-from-browser-code</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/llm002-user-input-interpolated-into-system-prompt</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/llm003-model-output-rendered-as-html-without-sanitization</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/llm004-model-output-executed-as-code-or-shell-command</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/cfg001-debug-mode-enabled</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/cfg002-env-exists-but-gitignore-doesn-t-exclude-it</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/cfg003-database-security-rules-wide-open</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/cfg004-remote-script-piped-straight-into-a-shell</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/cfg005-record-fetched-by-id-without-ownership-check</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/lang001-sql-query-built-dynamically-in-native-application-code</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/lang002-shell-command-receives-dynamic-input</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/lang003-password-hashed-with-md5-or-sha-1</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/lang004-tls-certificate-verification-disabled</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
<url>
<loc>https://codecordon.up.railway.app/rules/lang005-untrusted-data-passed-to-unsafe-deserialization</loc>
<lastmod>2026-07-15T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.65</priority>
</url>
</urlset>
