.NET (WPF and Windows Forms) bindings for the Chromium Embedded Framework
This report summarizes scanner evidence for cefsharp/CefSharp, a C# project with 10,267 GitHub stars. SynthScan examined 97,668 lines of code across 839 source files, recording 1196 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 12.6 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 1190 finding(s).
Are imports declared and package/API names verified? 6 finding(s).
Are wrappers, guards, and repeated structures necessary? 7 finding(s).
Which changes need focused human review? 1196 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1196 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CefSharp.OffScreen.Example/crash_reporter.cfg | 1 | # Crash reporting is configured using an INI-style config file named | COMMENT |
| LOW | CefSharp/SslStatus.cs | 1 | // Copyright © 2016 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/SslStatus.cs | 21 | /// If the certificate is valid then <see cref="CertStatus.None"/> is returned. | COMMENT |
| LOW | CefSharp/WaitForSelectorAsyncResponse.cs | 1 | // Copyright © 2022 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/IPopupFeatures.cs | 1 | // Copyright © 2016 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/IPopupFeatures.cs | 21 | /// </summary> | COMMENT |
| LOW | CefSharp/DependencyChecker.cs | 21 | /// </summary> | COMMENT |
| LOW | CefSharp/DependencyChecker.cs | 101 | /// relative to the path provided and returns a list of missing ones | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 1 | // Copyright © 2015 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 21 | /// function or targeted links will share the same render process and the same request context as | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 41 | /// <returns>Returns true if same storage</returns> | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 61 | /// Register a scheme handler factory for the specified schemeName and optional domainName. | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 81 | COMMENT | |
| LOW | CefSharp/IRequestContext.cs | 101 | /// <summary> | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 121 | /// preference values. This method must be called on the browser process UI | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 141 | /// application thread will be the CEF UI thread.</remarks> | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 161 | COMMENT | |
| LOW | CefSharp/IRequestContext.cs | 181 | /// <see cref="IRequestHandler.OnCertificateError"/>. If you call this it is | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 201 | /// completion. This param is optional</param> | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 221 | /// Returns the current value for <paramref name="contentType"/> that applies for the | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 241 | /// issues in Chromium. Make sure that you first understand the potential | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 261 | /// <param name="topLevelUrl">Top level url</param> | COMMENT |
| LOW | CefSharp/IRequestContext.cs | 281 | /// <param name="requestingUrl">Requesting url</param> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 21 | /// </summary> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 41 | { | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 481 | COMMENT | |
| LOW | CefSharp/WebBrowserExtensions.cs | 501 | /// or when <see cref="IChromiumWebBrowserBase.LoadError"/> is called to signify a load failure. | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 581 | throw; | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 601 | /// await Task.WhenAll( | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 781 | /// </summary> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 881 | request.Headers = headers; | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 941 | /// <remarks> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1101 | } | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1241 | /// </summary> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1341 | COMMENT | |
| LOW | CefSharp/WebBrowserExtensions.cs | 1361 | host.PrintToPdf(path, settings, callback); | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1401 | /// <summary> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1481 | COMMENT | |
| LOW | CefSharp/WebBrowserExtensions.cs | 1521 | } | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1541 | /// <param name="deltaX">The delta x coordinate.</param> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1601 | } | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1621 | /// in javascript is Promise.resolve so even no promise values will be treated as a promise. Your javascript sho | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1641 | } | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1661 | return browser.EvaluateScriptAsync(promiseHandlerScript, timeout: timeout, useImmediatelyInvokedFuncExpressi | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1741 | } | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1781 | /// <param name="methodName">The javascript method name to execute.</param> | COMMENT |
| LOW | CefSharp/WebBrowserExtensions.cs | 1861 | /// choose. | COMMENT |
| LOW | CefSharp/IUrlRequestClient.cs | 1 | // Copyright © 2019 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/IUrlRequestClient.cs | 21 | /// <param name="port">the port number.</param> | COMMENT |
| LOW | CefSharp/IUrlRequestClient.cs | 41 | /// Notifies the client of download progress. | COMMENT |
| LOW | CefSharp/WaitForNavigationAsyncResponse.cs | 1 | // Copyright © 2022 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/WaitForNavigationAsyncResponse.cs | 21 | /// </summary> | COMMENT |
| LOW | CefSharp/ResourceRequestHandlerFactoryItem.cs | 1 | // Copyright © 2017 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/IRequest.cs | 1 | // Copyright © 2014 The CefSharp Authors. All rights reserved. | COMMENT |
| LOW | CefSharp/IRequest.cs | 21 | /// <summary> | COMMENT |
| LOW | CefSharp/IRequest.cs | 41 | string Method { get; set; } | COMMENT |
| LOW | CefSharp/IRequest.cs | 61 | COMMENT | |
| LOW | CefSharp/IRequest.cs | 81 | /// request.Headers = headers; | COMMENT |
| LOW | CefSharp/IRequest.cs | 101 | COMMENT | |
| LOW | CefSharp/IRequest.cs | 121 | COMMENT | |
| 1110 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | CefSharp/Enums/CefErrorCode.cs | 518 | /// Failed to set the socket's receive buffer size as requested. | COMMENT |
| HIGH⚡ | CefSharp/Enums/CefErrorCode.cs | 523 | /// Failed to set the socket's send buffer size as requested. | COMMENT |
| HIGH⚡ | CefSharp/Enums/CefErrorCode.cs | 528 | /// Failed to set the socket's receive buffer size as requested, despite success | COMMENT |
| HIGH⚡ | CefSharp/Enums/CefErrorCode.cs | 534 | /// Failed to set the socket's send buffer size as requested, despite success | COMMENT |
| HIGH | …e.Runtime.RefAssembly/CefSharp.Core.Runtime.netcore.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | CefSharp.Example/Properties/Resources.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| HIGH | …harp.WinForms.Example/Properties/Resources.Designer.cs | 3 | // This code was generated by a tool. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | CefSharp.Core/BrowserSubprocess/SelfHost.cs | 79 | var browserSubprocessDll = System.Runtime.Loader.AssemblyLoadContext.Default.LoadFromAssemblyPath(browserSub | CODE |
| CRITICAL | CefSharp.Wpf.Example/Views/BrowserTabView.xaml.cs | 225 | CefSharp.Example.Properties.Resources.beach.Save(beachImageStream, System.Drawing.Imaging.ImageFormat.Jpeg); | CODE |
| CRITICAL | CefSharp.Example/Resources/assets/js/jquery.js | 5 | return new Za.prototype.init(a,b,c,d,e)}m.Tween=Za,Za.prototype={constructor:Za,init:function(a,b,c,d,e,f){this.elem=a,t | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | CefSharp.Test/WebBrowserTestExtensions.cs | 73 | //end up with CefErrorCode.Aborted, I've created the following PR | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CefSharp/Handler/ResourceRequestHandler.cs | 15 | public class ResourceRequestHandler : IResourceRequestHandler | CODE |
| LOW | CefSharp/Handler/RequestHandler.cs | 14 | public class RequestHandler : IRequestHandler | CODE |
| LOW | CefSharp/Internals/InMemoryResourceRequestHandler.cs | 12 | public sealed class InMemoryResourceRequestHandler : IResourceRequestHandler | CODE |
| LOW | CefSharp.Example/Resources/ExceptionTest.html | 62 | function errorCallbackResultLogger(s) | CODE |
| LOW | …harp.Example/Handlers/ExampleResourceRequestHandler.cs | 21 | public class ExampleResourceRequestHandler : ResourceRequestHandler | CODE |
| LOW | CefSharp.Example/Handlers/ExampleRequestHandler.cs | 17 | public class ExampleRequestHandler : RequestHandler | CODE |
| LOW | …rp.WinForms.Example/Handlers/WinFormsRequestHandler.cs | 12 | public class WinFormsRequestHandler : ExampleRequestHandler | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | CefSharp/Enums/CookieSameSite.cs | 21 | /// None used to be the default value, but recent browser versions made Lax the default value to have reasonably | COMMENT |
| MEDIUM | CefSharp/Enums/CefErrorCode.cs | 904 | /// numbers that correspond to services, which are not robust to spurious input | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CefSharp.Wpf/ChromiumWebBrowser.cs | 947 | // TODO: The following code block *should* handle images, but GetFileContents is | COMMENT |
| LOW | CefSharp.Wpf/Rendering/WritableBitmapRenderHandler.cs | 113 | //once we're on the UI thread we need to check if it's still valid | COMMENT |
| LOW | CefSharp.Wpf/Rendering/InteropBitmapRenderHandler.cs | 57 | //Take a reference to the backBufferHandle, once we're on the UI thread we need to check if it's still v | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | CefSharp.Test/CookieManager/CookieManagerTests.cs | 102 | Assert.Equal("John Doe", cookie.Value); | CODE |
| LOW | CefSharp.Example/Resources/BindingTestSync.js | 122 | assert.equal("John Doe", employees[0].firstName + " " + employees[0].lastName, "Employee : " + employees[0].firs | CODE |
| LOW | CefSharp.Example/Resources/LegacyBindingTest.html | 91 | assert.equal("John Doe", employees[0].firstName + " " + employees[0].lastName, "Employee : " + employees | CODE |