01 introduction, renaming and fixing md issues

Signed-off-by: Helge Wehder <[email protected]>

Author: myteron

docs/Secure-Coding-Guide-for-Python/01_introduction/pyscg-0040/README.md

@@ -44,6 +44,6 @@ unknown
 
 |||
 |:---|:---|
-|[[Python 2023]](https://docs.python.org/3.9/tutorial/classes.html?highlight=private#private-variables)|Python Software Foundation. (2023). Classes - Private Variables. Available from: [Python Documentation](https://docs.python.org/3.9/tutorial/classes.html?highlight=private#private-variables) [accessed 13 September 2023]|
+|[[Python 2023]](https://docs.python.org/3.9/tutorial/classes.html?highlight=private#private-variables)|Python Software Foundation. (2023). Classes - Private Variables. Available from: [Python Documentation](https://docs.python.org/3.9/tutorial/classes.html?highlight=private#private-variables) \[accessed 13 September 2023\]|
 |[[OWASP, Conklin,  Drake, 2023]](https://cwe.mitre.org/data/definitions/134.html)|[CWE - CWE-134: Use of Externally-Controlled Format String (4.13) (mitre.org)](https://cwe.mitre.org/data/definitions/134.html)|
-|[Oracle Docs](https://docs.oracle.com/en/)| [Administering Oracle Access Management](https://docs.oracle.com/en/middleware/idm/access-manager/12.2.1.3/aiaag/introducing-oracle-access-management.html#GUID-D1D083AA-538E-4063-A921-9328DB784319) [accessed 29 October 2025]|
+|[Oracle Docs](https://docs.oracle.com/en/)| [Administering Oracle Access Management](https://docs.oracle.com/en/middleware/idm/access-manager/12.2.1.3/aiaag/introducing-oracle-access-management.html#GUID-D1D083AA-538E-4063-A921-9328DB784319) \[accessed 29 October 2025\]|

docs/Secure-Coding-Guide-for-Python/01_introduction/pyscg-0041/README.md

@@ -1,4 +1,4 @@
-# pyscg-0041: Use of hardcoded credentials
+# pyscg-0041: Avoid Hardcoded Credential
 
 Ensure that unique keys or secrets can be replaced or rejected at runtime and never hard-code sensitive information, such as passwords, and encryption keys in a component.
 
@@ -156,7 +156,7 @@ if __name__ == "__main__":
     unittest.main()
 ```
 
-The `compliant01.py` code avoids using password based authentication in the first place. It prints connection information only for convenience here and should not be considered in a real world implementation as per [CWE-532: Insertion of Sensitive Information into Log File](https://best.openssf.org/Secure-Coding-Guide-for-Python/CWE-664/CWE-532/) [OSSF 2025].
+The `compliant01.py` code avoids using password based authentication in the first place. It prints connection information only for convenience here and should not be considered in a real world implementation as per [CWE-532: Insertion of Sensitive Information into Log File](https://best.openssf.org/Secure-Coding-Guide-for-Python/CWE-664/CWE-532/) \[OSSF 2025\].
 
 ## Automated Detection
 
@@ -185,7 +185,7 @@ The `compliant01.py` code avoids using password based authentication in the firs
 
 |||
 |:---|:---|
-| [US Congress 1996] | Health Insurance Portability and Accountability Act (HIPAA) [online].Available from: [https://aspe.hhs.gov/reports/health-insurance-portability-accountability-act-1996](https://aspe.hhs.gov/reports/health-insurance-portability-accountability-act-1996) [accessed 27 February 2025]|
-| [European Parliament 2016] | General Data Protection Regulation (GDPR) [online]. Available from: [https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150) [accessed 27 February 2025]|
-| [CPPA 2025] |DIVISION 3. OBLIGATIONS [1427 - 3273.16] [online]. Available from: [https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150) [accessed 27 February 2025]|
-| [OSSF 2025] | CWE-532: Insertion of Sensitive Information into Log File [online]. Available from: [https://best.openssf.org/Secure-Coding-Guide-for-Python/CWE-664/CWE-532/](https://best.openssf.org/Secure-Coding-Guide-for-Python/CWE-664/CWE-532/) [accessed 27 February 2025]|
+| \[US Congress 1996\] | Health Insurance Portability and Accountability Act (HIPAA) \[online\].Available from: [https://aspe.hhs.gov/reports/health-insurance-portability-accountability-act-1996](https://aspe.hhs.gov/reports/health-insurance-portability-accountability-act-1996) \[accessed 27 February 2025\]|
+| \[European Parliament 2016\] | General Data Protection Regulation (GDPR) \[online\]. Available from: [https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150) \[accessed 27 February 2025\]|
+| \[CPPA 2025\] |DIVISION 3. OBLIGATIONS \[1427 - 3273.16\] \[online\]. Available from: [https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150) \[accessed 27 February 2025\]|
+| \[OSSF 2025\] | CWE-532: Insertion of Sensitive Information into Log File \[online\]. Available from: [https://best.openssf.org/Secure-Coding-Guide-for-Python/CWE-664/CWE-532/](https://best.openssf.org/Secure-Coding-Guide-for-Python/CWE-664/CWE-532/) \[accessed 27 February 2025\]|

docs/Secure-Coding-Guide-for-Python/01_introduction/pyscg-0042/README.md

@@ -1,4 +1,4 @@
-# pyscg-0042: Operator Precedence Logic Error
+# pyscg-0042: Mind Operator Precedence
 
 Failing to understand the order of precedence in expressions that read and write to the same object can lead to unintended side effects.
 

docs/Secure-Coding-Guide-for-Python/01_introduction/pyscg-0055/README.md

@@ -1,4 +1,4 @@
-# pyscg-0055: External Control of Assumed-Immutable Web Parameter
+# pyscg-0055: Validate Web Parameters
 
 Ensuring user roles are determined on the server side prevents attackers from manipulating permissions through client-side data.
 

docs/Secure-Coding-Guide-for-Python/readme.md

@@ -54,13 +54,13 @@ It is __not production code__ and requires code-style or python best practices t
 
 <tr>
 <td>CWE-501</td>
-<td><a href=01_introduction/pyscg-0040/README.md>pyscg-0040: Trust Boundary Violation</a></td>
+<td><a href=01_introduction/pyscg-0040/README.md>pyscg-0040: Respect Trust Boundaries</a></td>
 <td><a href="https://www.cvedetails.com/cve/CVE-2023-28597">CVE-2023-28597</a>,<br>CVSSv3.0: <b style='color:orange'>7.5</b>,<br>EPSS: <b>00.11</b> (05.11.2024)</td>
 </tr>
 
-<tr><td>CWE-798</td><td><a href=01_introduction/pyscg-0041/README.md>pyscg-0041: Use of hardcoded credentials</a></td><td></td></tr>
-<tr><td>CWE-783</td><td><a href=01_introduction/pyscg-0042/README.md>pyscg-0042: Operator Precedence Logic Error</a></td><td></td></tr>
-<tr><td>CWE-472</td><td><a href=01_introduction/pyscg-0055/README.md>pyscg-0055: External Control of Assumed-Immutable Web Parameter</a></td><td></td></tr>
+<tr><td>CWE-798</td><td><a href=01_introduction/pyscg-0041/README.md>pyscg-0041: Avoid Hardcoded Credential</a></td><td></td></tr>
+<tr><td>CWE-783</td><td><a href=01_introduction/pyscg-0042/README.md>pyscg-0042: Mind Operator Precedence</a></td><td></td></tr>
+<tr><td>CWE-472</td><td><a href=01_introduction/pyscg-0055/README.md>pyscg-0055: Validate Web Parameters</a></td><td></td></tr>
 
 <tr>
 <th>MITRE</th>