ASP.NET Core is a cross-platform .NET framework for building modern cloud-based web applications on Windows, Mac, or Linux.
10701 matches across 17 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | docs/Helix.md | 72 | D:\a\_work\1\s\.packages\microsoft.dotnet.helix.sdk\7.0.0-beta.21559.3\tools\Microsoft.DotNet.Helix.Sdk.MultiQueue.targe |
| CRITICAL | docs/Helix.md | 73 | D:\a\_work\1\s\.packages\microsoft.dotnet.helix.sdk\7.0.0-beta.21559.3\tools\Microsoft.DotNet.Helix.Sdk.MultiQueue.targe |
| CRITICAL | docs/Helix.md | 74 | ##[error].packages\microsoft.dotnet.helix.sdk\7.0.0-beta.21559.3\tools\Microsoft.DotNet.Helix.Sdk.MultiQueue.targets(78, |
| CRITICAL | …eware/Rewrite/src/PatternSegments/ServerNameSegment.cs | 12 | return context.HttpContext.Request.Host.Host.ToString(CultureInfo.InvariantCulture); |
| CRITICAL | src/Middleware/HealthChecks/src/PublicAPI.Shipped.txt | 2 | ~Microsoft.AspNetCore.Diagnostics.HealthChecks.HealthCheckMiddleware.InvokeAsync(Microsoft.AspNetCore.Http.HttpContext h |
| CRITICAL | src/Middleware/HealthChecks/src/PublicAPI.Shipped.txt | 14 | Microsoft.AspNetCore.Diagnostics.HealthChecks.HealthCheckMiddleware.HealthCheckMiddleware(Microsoft.AspNetCore.Http.Requ |
| CRITICAL | src/Middleware/HealthChecks/src/PublicAPI.Shipped.txt | 15 | Microsoft.AspNetCore.Diagnostics.HealthChecks.HealthCheckMiddleware.InvokeAsync(Microsoft.AspNetCore.Http.HttpContext! h |
| CRITICAL | src/Middleware/HealthChecks/src/PublicAPI.Shipped.txt | 19 | Microsoft.AspNetCore.Diagnostics.HealthChecks.HealthCheckOptions.HealthCheckOptions() -> void |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 66 | req.Headers.Add("If-Range", original.Content.Headers.LastModified.Value.ToString("r")); |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 83 | req.Headers.Add("If-Modified-Since", original.Content.Headers.LastModified.Value.AddHours(-1).ToString("r")); |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 100 | req.Headers.Add("If-Modified-Since", original.Content.Headers.LastModified.Value.ToString("r")); |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 117 | req.Headers.Add("If-Range", original.Content.Headers.LastModified.Value.ToString("r")); |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 172 | req.Headers.Add("If-Range", original.Content.Headers.LastModified.Value.Subtract(TimeSpan.FromDays(1)).ToString( |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 191 | req.Headers.Add("If-Range", original.Content.Headers.LastModified.Value.Subtract(TimeSpan.FromDays(1)).ToString( |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 219 | req.Headers.Add("If-Range", original.Content.Headers.LastModified.Value.ToString("r")); |
| CRITICAL | …dleware/StaticFiles/test/UnitTests/RangeHeaderTests.cs | 246 | req.Headers.Add("If-Range", original.Content.Headers.LastModified.Value.ToString("r")); |
| CRITICAL | src/Middleware/StaticFiles/src/PublicAPI.Shipped.txt | 66 | Microsoft.AspNetCore.StaticFiles.Infrastructure.SharedOptions.SharedOptions() -> void |
| CRITICAL | src/Middleware/StaticFiles/src/PublicAPI.Shipped.txt | 75 | Microsoft.AspNetCore.StaticFiles.Infrastructure.SharedOptionsBase.SharedOptionsBase(Microsoft.AspNetCore.StaticFiles.Inf |
| CRITICAL | …e/Spa/SpaServices.Extensions/src/PublicAPI.Shipped.txt | 15 | Microsoft.AspNetCore.SpaServices.AngularCli.AngularCliBuilder.AngularCliBuilder(string! npmScript) -> void |
| CRITICAL | …e/Spa/SpaServices.Extensions/src/PublicAPI.Shipped.txt | 16 | Microsoft.AspNetCore.SpaServices.AngularCli.AngularCliBuilder.Build(Microsoft.AspNetCore.SpaServices.ISpaBuilder! spaBui |
| CRITICAL | …e/Spa/SpaServices.Extensions/src/PublicAPI.Shipped.txt | 22 | Microsoft.AspNetCore.SpaServices.Prerendering.ISpaPrerendererBuilder.Build(Microsoft.AspNetCore.SpaServices.ISpaBuilder! |
| CRITICAL | …e/Spa/SpaServices.Extensions/src/PublicAPI.Shipped.txt | 43 | Microsoft.AspNetCore.SpaServices.StaticFiles.SpaStaticFilesOptions.SpaStaticFilesOptions() -> void |
| CRITICAL | …e/Spa/SpaServices.Extensions/src/PublicAPI.Shipped.txt | 49 | static Microsoft.AspNetCore.SpaServices.AngularCli.AngularCliMiddlewareExtensions.UseAngularCliServer(this Microsoft.Asp |
| CRITICAL | …e/Spa/SpaServices.Extensions/src/PublicAPI.Shipped.txt | 50 | static Microsoft.AspNetCore.SpaServices.ReactDevelopmentServer.ReactDevelopmentServerMiddlewareExtensions.UseReactDevelo |
| CRITICAL | …eCompression/test/ResponseCompressionMiddlewareTest.cs | 1325 | request.Headers.AcceptEncoding.Add(System.Net.Http.Headers.StringWithQualityHeaderValue.Parse(requestAcceptE |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 5 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsMiddleware.CorsMiddleware(Microsoft.AspNetCore.Http.RequestDelegate next, |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 6 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsMiddleware.CorsMiddleware(Microsoft.AspNetCore.Http.RequestDelegate next, |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 7 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsMiddleware.CorsMiddleware(Microsoft.AspNetCore.Http.RequestDelegate next, |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 8 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsMiddleware.Invoke(Microsoft.AspNetCore.Http.HttpContext context, Microsoft |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 9 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsOptions.AddDefaultPolicy(Microsoft.AspNetCore.Cors.Infrastructure.CorsPoli |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 10 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsOptions.AddDefaultPolicy(System.Action<Microsoft.AspNetCore.Cors.Infrastru |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 11 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsOptions.AddPolicy(string name, Microsoft.AspNetCore.Cors.Infrastructure.Co |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 12 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsOptions.AddPolicy(string name, System.Action<Microsoft.AspNetCore.Cors.Inf |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 13 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsOptions.GetPolicy(string name) -> Microsoft.AspNetCore.Cors.Infrastructure |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 16 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.AllowAnyHeader() -> Microsoft.AspNetCore.Cors.Infrastructure |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 17 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.AllowAnyMethod() -> Microsoft.AspNetCore.Cors.Infrastructure |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 18 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.AllowAnyOrigin() -> Microsoft.AspNetCore.Cors.Infrastructure |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 19 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.AllowCredentials() -> Microsoft.AspNetCore.Cors.Infrastructu |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 20 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.Build() -> Microsoft.AspNetCore.Cors.Infrastructure.CorsPoli |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 21 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.CorsPolicyBuilder(Microsoft.AspNetCore.Cors.Infrastructure.C |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 22 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.CorsPolicyBuilder(params string[] origins) -> void |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 23 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.DisallowCredentials() -> Microsoft.AspNetCore.Cors.Infrastru |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 24 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.SetIsOriginAllowed(System.Func<string, bool> isOriginAllowed |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 25 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.SetIsOriginAllowedToAllowWildcardSubdomains() -> Microsoft.A |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 26 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.SetPreflightMaxAge(System.TimeSpan preflightMaxAge) -> Micro |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 27 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.WithExposedHeaders(params string[] exposedHeaders) -> Micros |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 28 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.WithHeaders(params string[] headers) -> Microsoft.AspNetCore |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 29 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.WithMethods(params string[] methods) -> Microsoft.AspNetCore |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 30 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicyBuilder.WithOrigins(params string[] origins) -> Microsoft.AspNetCore |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 34 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsService.EvaluatePolicy(Microsoft.AspNetCore.Http.HttpContext context, Micr |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 35 | ~Microsoft.AspNetCore.Cors.Infrastructure.CorsService.EvaluatePolicy(Microsoft.AspNetCore.Http.HttpContext context, stri |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 36 | ~Microsoft.AspNetCore.Cors.Infrastructure.DefaultCorsPolicyProvider.GetPolicyAsync(Microsoft.AspNetCore.Http.HttpContext |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 38 | ~Microsoft.AspNetCore.Cors.Infrastructure.ICorsPolicyProvider.GetPolicyAsync(Microsoft.AspNetCore.Http.HttpContext conte |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 39 | ~Microsoft.AspNetCore.Cors.Infrastructure.ICorsService.ApplyResult(Microsoft.AspNetCore.Cors.Infrastructure.CorsResult r |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 40 | ~Microsoft.AspNetCore.Cors.Infrastructure.ICorsService.EvaluatePolicy(Microsoft.AspNetCore.Http.HttpContext context, Mic |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 41 | ~override Microsoft.AspNetCore.Cors.Infrastructure.CorsPolicy.ToString() -> string |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 42 | ~override Microsoft.AspNetCore.Cors.Infrastructure.CorsResult.ToString() -> string |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 61 | ~virtual Microsoft.AspNetCore.Cors.Infrastructure.CorsService.ApplyResult(Microsoft.AspNetCore.Cors.Infrastructure.CorsR |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 62 | ~virtual Microsoft.AspNetCore.Cors.Infrastructure.CorsService.EvaluatePreflightRequest(Microsoft.AspNetCore.Http.HttpCon |
| CRITICAL | src/Middleware/CORS/src/PublicAPI.Shipped.txt | 63 | ~virtual Microsoft.AspNetCore.Cors.Infrastructure.CorsService.EvaluateRequest(Microsoft.AspNetCore.Http.HttpContext cont |
| 5053 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .CodeQL.yml | 1 | # This file configures CodeQL runs and TSA bug autofiling. For more information, see: |
| LOW | eng/common/SetupNugetSources.sh | 1 | #!/usr/bin/env bash |
| LOW | eng/common/vmr-sync.sh | 1 | #!/bin/bash |
| LOW | eng/common/vmr-sync.sh | 21 | ### |
| LOW | eng/common/native/init-distro-rid.sh | 1 | #!/bin/sh |
| LOW | eng/common/native/init-distro-rid.sh | 61 | |
| LOW | …common/templates-official/variables/pool-providers.yml | 1 | # Select a pool provider based off branch name. Anything with branch name containing 'release' must go into an -Svc pool |
| LOW | eng/common/templates/vmr-build-pr.yml | 1 | # This pipeline is used for running the VMR verification of the PR changes in repo-level PRs. |
| LOW | eng/common/templates/variables/pool-providers.yml | 1 | # Select a pool provider based off branch name. Anything with branch name containing 'release' must go into an -Svc pool |
| LOW | eng/common/core-templates/stages/renovate.yml | 1 | # -------------------------------------------------------------------------------------- |
| LOW | eng/common/core-templates/steps/install-microbuild.yml | 1 | parameters: |
| LOW | eng/common/core-templates/job/renovate.yml | 1 | # -------------------------------------------------------------------------------------- |
| LOW | eng/common/core-templates/job/source-build.yml | 1 | parameters: |
| LOW | eng/common/core-templates/job/source-build.yml | 21 | # published by source-build. |
| LOW | .devcontainer/scripts/container-creation.sh | 1 | #!/usr/bin/env bash |
| LOW | .github/workflows/community-pr-issue-check.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"5d2c80402496fddfbfe56c07c183fe876ad6866c078b22967cec94eefd4 |
| LOW | .github/workflows/community-pr-issue-check.lock.yml | 21 | # Not all edits will cause changes to this file. |
| LOW | .github/workflows/community-pr-issue-check.lock.yml | 41 | # - github/gh-aw-actions/setup@2d6db59a9f9fdfb957a7753d83270a91e84ecf5c # v0.77.1 |
| LOW | .github/workflows/browsertesting-deps-update.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"9bd8d2aa3c482a7e584100c909db9bb071d34b6da45006f8410e7e7e43f |
| LOW | .github/workflows/browsertesting-deps-update.lock.yml | 21 | # Not all edits will cause changes to this file. |
| LOW | .github/workflows/browsertesting-deps-update.lock.yml | 41 | # - actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 |
| LOW | .github/workflows/browsertesting-deps-update.lock.yml | 781 | # --allow-tool nuget(get-latest-package-version) |
| LOW | .github/workflows/cswin32-update.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"f9e3c7b365be12337ecff3579f8bf03e3728f86f58e673ac0eae8105678 |
| LOW | .github/workflows/cswin32-update.lock.yml | 21 | # Not all edits will cause changes to this file. |
| LOW | .github/workflows/cswin32-update.lock.yml | 41 | # - actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 |
| LOW | .github/workflows/cswin32-update.lock.yml | 781 | # --allow-tool nuget(get-latest-package-version) |
| LOW | .github/workflows/cswin32-update.lock.yml | 801 | # --allow-tool shell(jq) |
| LOW | .github/workflows/test-quarantine.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"4f83c8eb8df79483e57ce283e24be142ea3c1de9b1a0d1cdd9861c30b17 |
| LOW | .github/workflows/test-quarantine.lock.yml | 21 | # Not all edits will cause changes to this file. |
| LOW | .github/workflows/test-quarantine.lock.yml | 41 | # - actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 |
| LOW | .github/workflows/test-quarantine.lock.yml | 61 | # run: | |
| LOW | .github/workflows/test-quarantine.lock.yml | 81 | # link = resp.headers.get("Link", "") |
| LOW | .github/workflows/test-quarantine.lock.yml | 101 | # |
| LOW | .github/workflows/test-quarantine.lock.yml | 121 | # for f in files: |
| LOW | .github/workflows/test-quarantine.lock.yml | 141 | # "number": pr["number"], |
| LOW | .github/workflows/test-quarantine.lock.yml | 941 | # --allow-tool shell(echo) |
| LOW | .github/workflows/labeler-predict-pulls.yml | 1 | # Workflow template imported and updated from: |
| LOW | .github/workflows/relabel-perf-improvements.yml | 1 | name: Relabel benchmark perf issues |
| LOW | .github/workflows/issue-triage-agent.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"bf6ec2f8045da58462a90d042ecd569b2d3aa531ca3ada88712b8adb3ed |
| LOW | .github/workflows/issue-triage-agent.lock.yml | 21 | # Not all edits will cause changes to this file. |
| LOW | .github/workflows/issue-triage-agent.lock.yml | 801 | # --allow-tool shell(grep) |
| LOW | .azure/pipelines/jobs/default-build.yml | 1 | # default-build.yml |
| LOW | .azure/pipelines/jobs/default-build.yml | 21 | # The name of the artifact container |
| LOW | …ware/Diagnostics.Abstractions/src/DiagnosticMessage.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …ware/Diagnostics.Abstractions/src/DiagnosticMessage.cs | 41 | /// </summary> |
| LOW | …are/Diagnostics.Abstractions/src/CompilationFailure.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …are/Diagnostics.Abstractions/src/CompilationFailure.cs | 61 | /// <summary> |
| LOW | …agnostics.Abstractions/src/IExceptionHandlerFeature.cs | 21 | /// is un-escaped. |
| LOW | …stics.Abstractions/src/IExceptionHandlerPathFeature.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …ostics.Abstractions/src/IStatusCodeReExecuteFeature.cs | 21 | /// <summary> |
| LOW | …/Diagnostics.Abstractions/src/ICompilationException.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …tics.Abstractions/src/IDeveloperPageExceptionFilter.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …aderPropagation/src/HeaderPropagationMessageHandler.cs | 21 | /// <param name="options">The options that define which headers are propagated.</param> |
| LOW | …/src/HeaderPropagationMessageHandlerEntryCollection.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …ware/HeaderPropagation/src/HeaderPropagationContext.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …leware/HeaderPropagation/src/HeaderPropagationEntry.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …leware/HeaderPropagation/src/HeaderPropagationEntry.cs | 41 | /// </summary> |
| LOW | …derPropagation/src/HeaderPropagationEntryCollection.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| LOW | …derPropagation/src/HeaderPropagationEntryCollection.cs | 61 | |
| LOW | …pagation/src/HeaderPropagationMessageHandlerOptions.cs | 1 | // Licensed to the .NET Foundation under one or more agreements. |
| 5075 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …vc/Mvc.Analyzers/src/TagHelpersInCodeBlocksAnalyzer.cs | 25 | // Generated Razor code is considered auto generated. By default analyzers skip over auto-generated code unless |
| HIGH | …erences#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …malApis#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …rollers#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …alTexts#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …OpenApi#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …Schemas#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …rollers#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …Formats#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | …Schemas#OpenApiXmlCommentSupport.generated.verified.cs | 4 | // This code was generated by a tool. |
| HIGH | src/OpenApi/gen/XmlCommentGenerator.Emitter.cs | 22 | // This code was generated by a tool. |
| HIGH | …E2ETest/ServerRenderingTests/EnhancedNavigationTest.cs | 777 | // Staleness check is used to assert enhanced navigation is enabled/disabled, as requested |
| HIGH | …E2ETest/ServerRenderingTests/EnhancedNavigationTest.cs | 857 | // staleness check is used to assert enhanced navigation is enabled/disabled, as requested |
| HIGH | src/Http/Routing/tools/Swaggatherer/Template.cs | 77 | // This code was generated by the Swaggatherer |
| HIGH | …marks/Matching/MatcherGithubBenchmarkBase.generated.cs | 9 | // This code was generated by the Swaggatherer |
| HIGH | …kGeneration/LinkGenerationGithubBenchmark.generated.cs | 10 | // This code was generated by the Swaggatherer |
| HIGH | …_TakesCustomMetadataEmitter_Has_Metadata.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ptyQueryStringValueProvided_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …urnsValidationProblemResult_Has_Metadata.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …icitQuery_NullableIntArrayParam_Optional.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …tion_ExplicitQuery_ComplexTypeArrayParam.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …thArrayQueryString_AndBody_ShouldUseBody.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …r/Baselines/MapAction_BindAsync_Snapshot.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …apAction_NoParam_StringReturn_WithFilter.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ullableStringArrayParam_EmptyQueryValues.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …pAction_MultipleStringParam_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ltiple_MapAction_WithParams_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …icitQuery_NullableIntArrayParam_Optional.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …es/MapAction_ReturnsVoid_Has_No_Metadata.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …n_ExplicitQuery_NullableStringArrayParam.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …pportsSameInterceptorsFromDifferentFiles.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ion_ExplicitSource_SimpleReturn_Snapshot.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …QueryString_AndBody_ShouldUseQueryString.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …nBodyOrService_HandlesBothJsonAndService.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …MapAction_ImplicitQuery_StringArrayParam.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …/Multiple_MapAction_NoParam_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …tringArrayParam_Optional_QueryNotPresent.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ion_ExplicitHeader_ComplexTypeArrayParam.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …_ExplicitHeader_NullableStringArrayParam.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …tor/Baselines/VerifyAsParametersBaseline.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …_ImplicitQuery_StringArrayParam_Optional.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …rtsDifferentInterceptorsFromSameLocation.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …y_IntArrayParam_Optional_QueryNotPresent.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …s/MapAction_SingleEnumParam_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …leIntArrayParam_Optional_QueryNotPresent.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …lines/MapAction_ReturnsTodo_Has_Metadata.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …/MapPost_WithArrayQueryString_ShouldFail.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …y_IntArrayParam_Optional_QueryNotPresent.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …thArrayQueryString_AndBody_ShouldUseBody.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …on_MultipleSpecialTypeParam_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ion_ImplicitQuery_IntArrayParam_Optional.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ion_ExplicitQuery_IntArrayParam_Optional.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …ExplicitBodyParam_ComplexReturn_Snapshot.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …tion_SingleComplexTypeParam_StringReturn.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …leIntArrayParam_Optional_QueryNotPresent.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …_ExplicitQuery_StringArrayParam_Optional.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …tringArrayParam_Optional_QueryNotPresent.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …n_ImplicitQuery_NullableStringArrayParam.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …thArrayQueryString_AndBody_ShouldUseBody.generated.txt | 3 | // This code was generated by a tool. |
| HIGH | …RequestDelegateValidateGeneratedFormCode.generated.txt | 3 | // This code was generated by a tool. |
| 52 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 49 | async def download_deb_files_parallel(mirror, packages, tmp_dir): |
| LOW | eng/common/cross/install-debs.py | 65 | async def download_package_index_parallel(mirror, arch, suites, check_sig, keyring): |
| LOW | …rWebCSharp.1/Components/Layout/ReconnectModal.razor.js | 11 | function handleReconnectStateChanged(event) { |
| LOW | …rWebCSharp.1/Components/Layout/ReconnectModal.razor.js | 59 | async function retryWhenDocumentBecomesVisible() { |
| LOW | src/SignalR/clients/ts/FunctionalTests/ts/Common.ts | 108 | export function eachTransportAndProtocolAndHttpClient(action: (transport: HttpTransportType, protocol: IHubProtocol, htt |
| LOW | src/SignalR/clients/ts/signalr/tests/Utils.ts | 6 | export function registerUnhandledRejectionHandler(): void { |
| LOW | …ignalR/clients/ts/signalr/tests/HttpConnection.test.ts | 39 | function ServerSentEventsNotAllowed() { throw new Error("Don't allow ServerSentEvents."); } |
| LOW | …/Microsoft.JSInterop.JS/src/src/Microsoft.JSInterop.ts | 581 | export function disposeJSObjectReferenceById(id: number) { |
| LOW | …ps/Wasm.Performance/TestApp/wwwroot/benchmarks/grid.js | 79 | async function measureRenderGridFromBlank(app) { |
| LOW | …ps/Wasm.Performance/TestApp/wwwroot/benchmarks/grid.js | 99 | async function measureRenderGridSwitchPages(app) { |
| LOW | …AspNetCore.Components.QuickGrid/src/QuickGrid.razor.js | 29 | export function checkColumnOptionsPosition(tableElement) { |
| LOW | …ver/RazorComponents/Components/ReconnectModal.razor.js | 11 | function handleReconnectStateChanged(event) { |
| LOW | …ver/RazorComponents/Components/ReconnectModal.razor.js | 59 | async function retryWhenDocumentBecomesVisible() { |
| LOW | …onents/test/testassets/BasicTestApp/wwwroot/index.html | 44 | function navigationManagerNavigate() { |
| LOW | …onents/test/testassets/BasicTestApp/wwwroot/index.html | 52 | function getRuntimeBuildConfiguration() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 5 | async function invokeDotNetInteropMethodsAsync(shouldSupportSyncInterop, dotNetObjectByRef, instanceMethodsTarget, gener |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 313 | function roundTripByteArrayWrapperObject(byteArrayWrapperObject) { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 320 | function jsToDotNetStreamReturnValueAsync() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 329 | function jsToDotNetStreamReturnValue() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 334 | function jsToDotNetStreamWrapperObjectReturnValueAsync() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 346 | function roundTripByteArrayWrapperObjectAsync(byteArrayWrapperObject) { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 389 | function asyncFunctionThrowsSyncException() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 393 | function asyncFunctionThrowsAsyncException() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 399 | function asyncFunctionTakesLongerThanDefaultTimeoutToResolve() { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 433 | function receiveDotNetObjectByRefAsync(incomingData) { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 450 | async function validateDotNetStreamReference(streamRef) { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 456 | async function validateDotNetStreamWrapperReference(wrapper) { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 463 | async function receiveDotNetStreamReference(streamRef) { |
| LOW | …t/testassets/BasicTestApp/wwwroot/js/jsinteroptests.js | 467 | async function receiveDotNetStreamWrapperReference(wrapper) { |
| LOW | src/Components/Web.JS/src/PageTitle.ts | 10 | function getAndRemoveExistingTitle(): string | null { |
| LOW | src/Components/Web.JS/src/PageTitle.ts | 10 | function getAndRemoveExistingTitle(): string | null { |
| LOW | src/Components/Web.JS/src/StreamingInterop.ts | 21 | function getChunkFromArrayBufferView(data: ArrayBufferView, position: number, nextChunkSize: number): Uint8Array { |
| LOW | src/Components/Web.JS/src/Boot.WebAssembly.Common.ts | 200 | export function loadWebAssemblyPlatformIfNotStarted(serverOptions: WebAssemblyServerOptions | undefined): Promise<void> |
| LOW | src/Components/Web.JS/src/Boot.WebAssembly.Common.ts | 223 | export function hasStartedLoadingWebAssemblyPlatform(): boolean { |
| LOW | src/Components/Web.JS/src/Boot.WebAssembly.Common.ts | 227 | export function hasLoadedWebAssemblyPlatform(): boolean { |
| LOW | src/Components/Web.JS/src/Boot.WebAssembly.Common.ts | 231 | export function updateWebAssemblyRootComponents(operations: string, webAssemblyState: string): void { |
| LOW | src/Components/Web.JS/src/Boot.WebAssembly.Common.ts | 270 | function receiveWebAssemblyDotNetDataStream(streamId: number, data: Uint8Array, bytesRead: number, errorMessage: string) |
| LOW | src/Components/Web.JS/src/Virtualize.ts | 18 | function findClosestScrollContainer(element: HTMLElement | null): HTMLElement | null { |
| LOW | src/Components/Web.JS/src/Virtualize.ts | 117 | function compensateScrollForItemResizes(entries: ResizeObserverEntry[]): void { |
| LOW | src/Components/Web.JS/src/Virtualize.ts | 347 | function startConvergenceObserving(): void { |
| LOW | src/Components/Web.JS/src/Virtualize.ts | 559 | function processIntersectionEntries(entries: IntersectionObserverEntry[]): void { |
| LOW | src/Components/Web.JS/src/Boot.Server.Common.ts | 195 | export function updateServerRootComponents(operations: string, serverState: string): Promise<void> | undefined { |
| LOW | src/Components/Web.JS/src/Boot.Web.ts | 105 | function onInitialDomContentLoaded(options: Partial<WebStartOptions>) { |
| LOW | src/Components/Web.JS/src/Boot.Web.ts | 171 | function initFormValidationIfNeeded(formValidation?: ValidationOptions): void { |
| LOW | src/Components/Web.JS/src/Boot.Web.ts | 188 | async function callAfterStartedCallbacks(initializersPromise: Promise<JSInitializer>): Promise<void> { |
| LOW | src/Components/Web.JS/src/Boot.WebView.ts | 43 | function receiveWebViewDotNetDataStream(streamId: number, data: any, bytesRead: number, errorMessage: string): void { |
| LOW | …ts/Web.JS/src/Platform/Circuits/CircuitStartOptions.ts | 53 | function computeDefaultRetryInterval(previousAttempts: number, maxRetries?: number): number | null { |
| LOW | …onents/Web.JS/src/Platform/WebView/WebViewIpcCommon.ts | 23 | export function setApplicationIsTerminated(): void { |
| LOW | …onents/Web.JS/src/Platform/WebView/WebViewIpcSender.ts | 14 | export function sendBeginInvokeDotNetFromJS(callId: number, assemblyName: string | null, methodIdentifier: string, dotNe |
| LOW | …onents/Web.JS/src/Platform/WebView/WebViewIpcSender.ts | 18 | export function sendEndInvokeJSFromDotNet(asyncHandle: number, succeeded: boolean, argsJson: any): void { |
| LOW | src/Components/Web.JS/src/Platform/Mono/MonoPlatform.ts | 56 | getObjectFieldsBaseAddress: function getObjectFieldsBaseAddress(referenceTypedObject: System_Object): Pointer { |
| LOW | …Components/Web.JS/src/JSInitializers/JSInitializers.ts | 57 | async function importAndInvokeInitializer(jsInitializer: JSInitializer, asset: JSAsset): Promise<void> { |
| LOW | …Components/Web.JS/src/JSInitializers/JSInitializers.ts | 91 | function runMultiRuntimeInitializers( |
| LOW | …onents/Web.JS/src/JSInitializers/JSInitializers.Web.ts | 9 | export async function fetchAndInvokeInitializers(options: Partial<WebStartOptions>, logger: Logger) : Promise<JSInitiali |
| LOW | …nts/Web.JS/src/JSInitializers/JSInitializers.Server.ts | 8 | export async function fetchAndInvokeInitializers(options: Partial<CircuitStartOptions>) : Promise<JSInitializer> { |
| LOW | …ts/Web.JS/src/JSInitializers/JSInitializers.WebView.ts | 6 | export async function fetchAndInvokeInitializers() : Promise<JSInitializer> { |
| LOW | …eb.JS/src/JSInitializers/JSInitializers.WebAssembly.ts | 9 | export async function fetchAndInvokeInitializers(options: Partial<WebAssemblyStartOptions>, loadedConfig: MonoConfig): P |
| LOW | …onents/Web.JS/src/Rendering/ElementReferenceCapture.ts | 15 | function getCaptureIdAttributeName(referenceCaptureId: string) { |
| LOW | src/Components/Web.JS/src/Rendering/FocusOnNavigate.ts | 43 | function onEnhancedNavigationStart() { |
| LOW | src/Components/Web.JS/src/Rendering/LogicalElements.ts | 37 | export function toLogicalRootCommentElement(descriptor: ComponentDescriptor): LogicalElement { |
| 80 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …ourceGenerators/PublicTopLevelProgramGeneratorTests.cs | 0 | using microsoft.aspnetcore.builder; var app = webapplication.create(); app.mapget("/", () => "hello, world!"); app.run() |
| HIGH | …WebApplicationBuilder/PublicPartialProgramClassTest.cs | 0 | using microsoft.aspnetcore.builder; var app = webapplication.create(); app.mapget("/", () => "hello, world!"); app.run() |
| HIGH | …WebApplicationBuilder/PublicPartialProgramClassTest.cs | 0 | using microsoft.aspnetcore.builder; var app = webapplication.create(); app.mapget("/", () => "hello, world!"); app.run() |
| HIGH | …Http/Headers/test/ContentDispositionHeaderValueTest.cs | 0 | , new contentdispositionheadervalue("attachment") { filename = @ |
| HIGH | …Http/Headers/test/ContentDispositionHeaderValueTest.cs | 0 | , new contentdispositionheadervalue("attachment") { filename = @ |
| HIGH | …Http/Headers/test/ContentDispositionHeaderValueTest.cs | 0 | , new contentdispositionheadervalue("attachment") { filename = @ |
| HIGH | …Http/Headers/test/ContentDispositionHeaderValueTest.cs | 0 | , new contentdispositionheadervalue("attachment") { filename = @ |
| HIGH | …Http/Headers/test/ContentDispositionHeaderValueTest.cs | 0 | , new contentdispositionheadervalue("attachment") { filename = @ |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Filters.cs | 0 | {{innersource}} app.mapget("/", testaction) .addendpointfilterfactory((routehandlercontext, next) => async (context) => |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Filters.cs | 0 | {{innersource}} app.mapget("/", testaction) .addendpointfilterfactory((routehandlercontext, next) => async (context) => |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Filters.cs | 0 | {{innersource}} app.mapget("/", testaction) .addendpointfilterfactory((routehandlercontext, next) => async (context) => |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Filters.cs | 0 | {{innersource}} app.mapget("/", testaction) .addendpointfilterfactory((routehandlercontext, next) => async (context) => |
| HIGH | …elegateGenerator/RequestDelegateCreationTests.Forms.cs | 0 | void testaction(httpcontext httpcontext, iformfile file) { httpcontext.items["invoked"] = true; } app.mappost("/", testa |
| HIGH | …elegateGenerator/RequestDelegateCreationTests.Forms.cs | 0 | void testaction(httpcontext httpcontext, iformfile file) { httpcontext.items["invoked"] = true; } app.mappost("/", testa |
| HIGH | …elegateGenerator/RequestDelegateCreationTests.Forms.cs | 0 | void testaction(httpcontext httpcontext, iformfile file) { httpcontext.items["invoked"] = true; } app.mappost("/", testa |
| HIGH | …teGenerator/RuntimeCreationTests.ComplexFormBinding.cs | 0 | app.mappost("/", ([fromform] dictionary<string, bool> elements) => results.ok(elements)); |
| HIGH | …teGenerator/RuntimeCreationTests.ComplexFormBinding.cs | 0 | app.mappost("/", ([fromform] dictionary<string, bool> elements) => results.ok(elements)); |
| HIGH | …teGenerator/RuntimeCreationTests.ComplexFormBinding.cs | 0 | app.mappost("/", ([fromform] dictionary<string, bool> elements) => results.ok(elements)); |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Logging.cs | 0 | void testaction(httpcontext httpcontext, [frombody] todo todo) { httpcontext.items["invoked"] = true; } app.mappost("/", |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Logging.cs | 0 | void testaction(httpcontext httpcontext, [frombody] todo todo) { httpcontext.items["invoked"] = true; } app.mappost("/", |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Logging.cs | 0 | void testaction(httpcontext httpcontext, [frombody] todo todo) { httpcontext.items["invoked"] = true; } app.mappost("/", |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Logging.cs | 0 | void testaction(httpcontext httpcontext, [frombody] todo todo) { httpcontext.items["invoked"] = true; } app.mappost("/", |
| HIGH | …egateGenerator/RequestDelegateCreationTests.Logging.cs | 0 | void testaction(httpcontext httpcontext, [frombody] todo todo) { httpcontext.items["invoked"] = true; } app.mappost("/", |
| HIGH | …g/TestHost/test/UseSolutionRelativeContentRootTests.cs | 0 | <solution> <configurations> <configuration name="debug|any cpu" /> </configurations> </solution> |
| HIGH | …g/TestHost/test/UseSolutionRelativeContentRootTests.cs | 0 | <solution> <configurations> <configuration name="debug|any cpu" /> </configurations> </solution> |
| HIGH | …g/TestHost/test/UseSolutionRelativeContentRootTests.cs | 0 | <solution> <configurations> <configuration name="debug|any cpu" /> </configurations> </solution> |
| HIGH | …g/TestHost/test/UseSolutionRelativeContentRootTests.cs | 0 | <solution> <configurations> <configuration name="debug|any cpu" /> </configurations> </solution> |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …src/Infrastructure/DefaultPageHandlerMethodSelector.cs | 87 | // Step 1: match on HTTP method. |
| LOW | …src/Infrastructure/DefaultPageHandlerMethodSelector.cs | 117 | // Step 2: remove candidates with non-matching handlers. |
| LOW | src/Mvc/Mvc.Core/src/Formatters/FormatFilter.cs | 97 | // We need to check if the action can generate the content type the user asked for. That is, treat the |
| LOW | …clients/ts/FunctionalTests/scripts/karma.local.conf.js | 21 | // On linux, the browsers just return the command, not a path, so we need to check if it exists. |
| LOW | …c/SignalR/clients/ts/signalr/src/WebSocketTransport.ts | 97 | // ErrorEvent is a browser only type we need to check if the type exists before using it |
| LOW | …c/SignalR/clients/ts/signalr/src/WebSocketTransport.ts | 126 | // ErrorEvent is a browser only type we need to check if the type exists before using it |
| LOW | src/SignalR/server/Core/src/HubConnectionContext.cs | 597 | // If there's a transfer format feature, we need to check if we're compatible and set th |
| LOW | …mponents/Web.JS/src/Rendering/Events/EventDelegator.ts | 171 | // when connection closed, it will detachWebRendererInterop, so we need to check if the renderer is still attached |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 29 | // Step 1: directory should be completely empty |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 33 | // Step 2: instantiate the system and round-trip a payload |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 37 | // Step 3: validate that there's now a single key in the directory and that it's not protected |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 95 | // Step 1: directory should be completely empty |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 99 | // Step 2: instantiate the system and round-trip a payload |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 106 | // Step 3: validate that there's now a single key in the directory and that it's protected with DPAPI |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 139 | // Step 1: directory should be completely empty |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 143 | // Step 2: instantiate the system and round-trip a payload |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 152 | // Step 3: validate that there's now a single key in the directory and that it's is protected using |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 224 | // Step 1: directory should be completely empty |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 228 | // Step 2: instantiate the system and round-trip a payload |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 233 | // Step 3: validate that there's now a single key in the directory and that it's is protected using the cert |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 253 | // Step 1: directory should be completely empty |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 257 | // Step 2: instantiate the system and round-trip a payload |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 262 | // Step 3: validate that there's no key in the directory |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 293 | // Step 1: directory should be completely empty |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 297 | // Step 2: instantiate the system and create some data |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 304 | // Step 3: validate that there's now a single key in the directory and that it's is protected using the cert |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 312 | // Step 4: setup a second system and validate it can decrypt keys and unprotect data |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 54 | // Step 1: Instantiate the system and round-trip a payload |
| LOW | …tection/Extensions/test/DataProtectionProviderTests.cs | 72 | // Step 2: Validate that there's now a single key in the directory |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 326 | // Step 1: Generate a random key modifier and IV for this operation. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 332 | // Step 2: Decrypt the KDK, and use it to generate new encryption and HMAC keys. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 344 | // Step 2: Copy the key modifier and the IV to the output stream since they'll act as a header. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 347 | // Step 3: Generate IV for this operation right into the result array |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 351 | // Step 4: Perform the encryption operation. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 361 | // Step 5: Calculate the digest over the IV and ciphertext. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 447 | // Step 4: Validate the MAC provided as part of the payload. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 502 | // Step 1: Extract the key modifier and IV from the payload. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 518 | // Step 2: Decrypt the KDK and use it to restore the original encryption and MAC keys. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 544 | // Step 3: Calculate the correct MAC for this payload. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 552 | // Step 4: Validate the MAC provided as part of the payload. |
| LOW | …rotection/src/Managed/ManagedAuthenticatedEncryptor.cs | 555 | // Step 5: Decipher the ciphertext and return it to the caller. |
| LOW | …ion/src/KeyManagement/KeyRingBasedSpanDataProtector.cs | 62 | // Step 1: Write the magic header and key id |
| LOW | …ion/src/KeyManagement/KeyRingBasedSpanDataProtector.cs | 77 | // Step 2: Perform encryption into the destination writer |
| LOW | …/src/SP800_108/Win7SP800_108_CTR_HMACSHA512Provider.cs | 37 | // Step 1: Calculate all necessary offsets into the temp input & output buffer. |
| LOW | …/src/SP800_108/Win7SP800_108_CTR_HMACSHA512Provider.cs | 43 | // Step 2: Copy Label and Context into the temp input buffer. |
| LOW | …/src/SP800_108/Win7SP800_108_CTR_HMACSHA512Provider.cs | 47 | // Step 3: copy [L] into last part of data to be hashed, big-endian |
| LOW | …/src/SP800_108/Win7SP800_108_CTR_HMACSHA512Provider.cs | 50 | // Step 4: iterate until all desired bytes have been generated |
| LOW | src/Http/Routing/src/Matching/ILEmitTrieFactory.cs | 233 | // Basically we need to check if the text is non-ASCII first and bail if it is. |
| LOW | src/Http/Routing/src/Template/TemplateBinder.cs | 449 | // Step 2: If the route is a match generate the appropriate URI |
| LOW | src/Http/Routing/src/Template/TemplateBinder.cs | 469 | // Step 2: If the route is a match generate the appropriate URI |
| LOW | …elegateGenerator/RequestDelegateGeneratorSuppressor.cs | 55 | // To account for this, we need to check if the location is an InvocationExpression or a child of an Invocat |
| LOW | …rs/IIS/IIS/test/testassets/InProcessWebSite/Startup.cs | 1110 | // We need to check if the aspnetcorev2_outofprocess dll is loaded by iisexpress.exe |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 280 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 303 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 833 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 837 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 859 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 869 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 894 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | …iddleware/ResponseCaching/test/ResponseCachingTests.cs | 904 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/OutputCaching/test/OutputCacheTests.cs | 317 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/OutputCaching/test/OutputCacheTests.cs | 341 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/OutputCaching/test/OutputCacheTests.cs | 875 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/OutputCaching/test/OutputCacheTests.cs | 879 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/OutputCaching/test/OutputCacheTests.cs | 899 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/OutputCaching/test/OutputCacheTests.cs | 909 | client.DefaultRequestHeaders.From = "user@example.com"; |
| LOW | src/Middleware/ResponseCompression/sample/LoremIpsum.cs | 8 | internal const string Text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse le |
| LOW | src/Middleware/ResponseCompression/sample/LoremIpsum.cs | 8 | internal const string Text = "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse le |
| LOW | src/Middleware/ResponseCompression/sample/LoremIpsum.cs | 9 | "Ut velit mauris, egestas sed, gravida nec, ornare ut, mi. Aenean ut orci vel massa suscipit pulvinar.Nulla soll |
| LOW | src/Middleware/ResponseCompression/sample/LoremIpsum.cs | 9 | "Ut velit mauris, egestas sed, gravida nec, ornare ut, mi. Aenean ut orci vel massa suscipit pulvinar.Nulla soll |
| LOW | …y/test/Identity.Test/UserClaimsPrincipalFactoryTest.cs | 45 | var user = new PocoUser { UserName = "Foo", Email = "foo@bar.com" }; |
| LOW | …dentity.Test/Passkeys/PasskeyHandlerAttestationTest.cs | 987 | public string? UserDisplayName { get; set; } = "John Doe"; |
| LOW | …kCore/test/EF.Test/UserStoreEncryptPersonalDataTest.cs | 207 | user.Email = "test@test.com"; |
| LOW | …ecification.Tests/src/UserManagerSpecificationTests.cs | 1821 | IdentityResultAssert.IsSuccess(await manager.SetEmailAsync(user, "test@test.com")); |
| LOW | …rsWebSite/TagHelpers/TagCloudViewComponentTagHelper.cs | 19 | ("Lorem ipsum dolor sit amet consectetur adipisicing elit sed do eiusmod tempor incididunt ut labore et dolore m |
| LOW | …rsWebSite/TagHelpers/TagCloudViewComponentTagHelper.cs | 19 | ("Lorem ipsum dolor sit amet consectetur adipisicing elit sed do eiusmod tempor incididunt ut labore et dolore m |
| LOW | …es/RazorWebSite/Controllers/UrlResolutionController.cs | 14 | Name = "John Doe" |
| LOW | src/Security/Authentication/test/CertificateTests.cs | 571 | const string Expected = "John Doe"; |
| LOW | src/Security/Authentication/test/CertificateTests.cs | 646 | const string Expected = "John Doe"; |
| LOW | src/Security/Authentication/test/CertificateTests.cs | 696 | const string Expected = "John Doe"; |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 18 | var model = new ObjectWithJObject { CustomData = (JsonObject)JsonSerializer.SerializeToNode(new { Emails = new[] |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 34 | var model = new ObjectWithJObject { CustomData = (JsonObject)JsonSerializer.SerializeToNode(new { Email = "foo@b |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 48 | var model = new ObjectWithJObject { CustomData = new JsonObject([new("Email", "foo@bar.com"), new("Name", "Bar") |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 51 | patch.Operations.Add(new Operation<ObjectWithJObject>("test", "/CustomData/Email", null, "foo@bar.com")); |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 65 | var model = new ObjectWithJObject { CustomData = new JsonObject([new("Email", "foo@bar.com")]) }; |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 74 | Assert.Equal("foo@bar.com", model.CustomData["UserName"].GetValue<string>()); |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 147 | var model = new ObjectWithJObject { CustomData = new JsonObject([new("Email", "foo@bar.com"), new("Name", "Bar") |
| LOW | …ch.SystemTextJson/test/JsonPatchDocumentJObjectTest.cs | 163 | var model = new ObjectWithJObject { CustomData = new JsonObject([new("Email", "foo@bar.com"), new("Name", "Bar") |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 20 | var model = new ObjectWithJObject { CustomData = JObject.FromObject(new { Emails = new[] { "foo@bar.com" } }) }; |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 36 | var model = new ObjectWithJObject { CustomData = JObject.FromObject(new { Email = "foo@bar.com", Name = "Bar" }) |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 50 | var model = new ObjectWithJObject { CustomData = JObject.FromObject(new { Email = "foo@bar.com", Name = "Bar" }) |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 53 | patch.Operations.Add(new Operation<ObjectWithJObject>("test", "/CustomData/Email", null, "foo@bar.com")); |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 67 | var model = new ObjectWithJObject { CustomData = JObject.FromObject(new { Email = "foo@bar.com" }) }; |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 76 | Assert.Equal("foo@bar.com", model.CustomData["UserName"].Value<string>()); |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 148 | var model = new ObjectWithJObject { CustomData = JObject.FromObject(new { Email = "foo@bar.com", Name = "Bar" }) |
| LOW | …eatures/JsonPatch/test/JsonPatchDocumentJObjectTest.cs | 164 | var model = new ObjectWithJObject { CustomData = JObject.FromObject(new { Email = "foo@bar.com", Name = "Bar" }) |
| LOW | …i.SourceGenerators.Tests/OperationTests.MinimalApis.cs | 327 | /// <example>"user@example.com"</example> |
| LOW | …i.SourceGenerators.Tests/OperationTests.MinimalApis.cs | 490 | Assert.Equal("user@example.com", path19.Parameters[1].Example.GetValue<string>()); |
| LOW | …malApis#OpenApiXmlCommentSupport.generated.verified.cs | 82 | cache.Add(@"P:MixedParametersClass.Email", new XmlComment(@"The user's email address.", null, null, null, nu |
| LOW | …mponents/Endpoints/test/Binding/FormDataMapperTests.cs | 1785 | var expected = new Customer() { Age = 20, Name = "John Doe", Email = "john.doe@example.com", IsPreferred = true |
| LOW | …mponents/Endpoints/test/Binding/FormDataMapperTests.cs | 1789 | ["Name"] = "John Doe", |
| LOW | …mponents/Endpoints/test/Binding/FormDataMapperTests.cs | 2060 | var expected = new Customer() { Age = 0, Name = "John Doe", Email = "john.doe@example.com", IsPreferred = true } |
| LOW | …mponents/Endpoints/test/Binding/FormDataMapperTests.cs | 2064 | ["Name"] = "John Doe", |
| LOW | …mponents/Endpoints/test/Binding/FormDataMapperTests.cs | 2099 | var expected = new FrequentCustomer() { Age = 20, Name = "John Doe", Email = "john@example.com", IsPreferred = t |
| LOW | …mponents/Endpoints/test/Binding/FormDataMapperTests.cs | 2103 | ["Name"] = "John Doe", |
| LOW | …s/Components.TestServer/RemoteAuthenticationStartup.cs | 99 | ["name"] = "Jane Doe", |
| LOW | …mponents/Web.JS/test/Validation/CoreValidators.test.ts | 429 | expect(regex(makeContext({ value: '555-1234', params: { pattern: '\\d{3}-\\d{4}' } }))).toBe(true); |
| LOW | …mponents/Web.JS/test/Validation/CoreValidators.test.ts | 507 | expect(email(makeContext({ value: 'user@example.com' }))).toBe(true); |
| LOW | src/Components/Components/test/NavigationManagerTest.cs | 98 | var actualUri = navigationManager.GetUriWithQueryParameter("full name", "John Doe"); |
| LOW | src/Components/Components/test/NavigationManagerTest.cs | 112 | var actualUri = navigationManager.GetUriWithQueryParameter("name", "John Doe"); |
| LOW | src/Components/Components/test/NavigationManagerTest.cs | 179 | ["full name"] = "John Doe", // Single value |
| LOW | …test/PersistentState/PersistentServicesRegistryTest.cs | 358 | Name = "John Doe", |
| 10 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | eng/common/core-templates/stages/renovate.yml | 1 | # -------------------------------------------------------------------------------------- |
| MEDIUM | eng/common/core-templates/stages/renovate.yml | 3 | # -------------------------------------------------------------------------------------- |
| MEDIUM | eng/common/core-templates/stages/renovate.yml | 9 | # -------------------------------------------------------------------------------------- |
| MEDIUM | eng/common/core-templates/job/renovate.yml | 1 | # -------------------------------------------------------------------------------------- |
| MEDIUM | eng/common/core-templates/job/renovate.yml | 3 | # -------------------------------------------------------------------------------------- |
| MEDIUM | eng/common/core-templates/job/renovate.yml | 17 | # -------------------------------------------------------------------------------------- |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 31 | // ── build mode + Build scenario (local dev) ────────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 56 | // ── build mode + Publish scenario ──────────────────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 94 | // ── publish mode + Publish scenario (exe found) ────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 121 | // ── publish mode + Publish scenario (dll only) ─────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 162 | // ── all mode + Publish scenario ────────────────────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 200 | // ── Custom E2EAppsRelativeDir ──────────────────────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 222 | // ── Multiple apps ──────────────────────────────────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 244 | // ── PublicUrl metadata flows through ───────────────────────────── |
| MEDIUM | …omponents/Testing/test/GenerateE2EManifestTaskTests.cs | 268 | // ── Helpers ────────────────────────────────────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …ommon/core-templates/steps/enable-internal-sources.yml | 24 | # If running on dnceng (internal project), just use the default behavior for NuGetAuthenticate. |
| MEDIUM | .devcontainer/scripts/container-creation.sh | 14 | # Add .NET Dev Certs to environment to facilitate debugging. |
| MEDIUM | src/Mvc/Mvc.TagHelpers/src/FormTagHelper.cs | 260 | // A <form> tag that doesn't utilize asp-* attributes. Let it flow to the output. |
| MEDIUM | …ts/Web.JS/src/Services/ComponentDescriptorDiscovery.ts | 278 | // comment invalid. We could unencode them in .NET Code, but that would be slower to do and we can leverage the fact t |
| MEDIUM | src/Components/Web.JS/src/Validation/DomUtils.ts | 44 | // Use getComputedStyle for robust visibility detection covering CSS classes, stylesheets, |
| MEDIUM | src/Components/Web/src/WebRenderer.cs | 119 | // parameters, we utilize the source-generated WebRendererSerializerContext |
| MEDIUM | src/Components/Components/src/ChangeDetection.cs | 33 | if (oldValueType != newValueType // Definitely different |
| MEDIUM | …nents/Components/src/Reflection/ComponentProperties.cs | 310 | // SupplyParameterFromQuery feature that did not utilize cascading values, and thus did not have this li |
| MEDIUM | src/Http/Headers/src/SetCookieHeaderValue.cs | 161 | /// "SameSite" cookies offer a robust defense against CSRF attack when |
| MEDIUM | src/Http/Http.Extensions/src/RequestDelegateFactory.cs | 792 | // For complex types, leverage the shared form binding infrastructure. For example, |
| MEDIUM | src/Http/Http.Extensions/src/RequestDelegateFactory.cs | 2689 | // leverage the STJ polymorphism support. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | eng/common/tools.sh | 323 | # Check if the script is older than 30 days using timestamp file |
| LOW | eng/common/tools.sh | 425 | # Check if the toolset has already been extracted |
| LOW | eng/common/SetupNugetSources.sh | 59 | # Check if disabledPackageSources section exists |
| LOW | eng/common/SetupNugetSources.sh | 65 | # Check if this source name is disabled |
| LOW | eng/common/SetupNugetSources.sh | 85 | # Check if source already exists |
| LOW | eng/common/SetupNugetSources.sh | 115 | # Check if disabledPackageSources section exists |
| LOW | eng/common/SetupNugetSources.sh | 185 | # Check if there is no existing credential for this FeedName |
| LOW | eng/common/core-templates/steps/source-build.yml | 31 | # Check if AzDO substitutes in a build config from a variable, and use it if so. |
| LOW | eng/common/core-templates/steps/install-microbuild.yml | 64 | # Check if ESRP is disabled while SignType is real |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | eng/common/native/install-dependencies.sh | 7 | # Usage: |
| LOW | …common/templates-official/variables/pool-providers.yml | 12 | # How to use: |
| LOW | eng/common/templates/variables/pool-providers.yml | 12 | # How to use: |
| LOW | eng/common/core-templates/job/renovate.yml | 11 | # Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | eng/build.sh | 362 | # Initialize global variables need to be set before the import of Arcade is imported |
| MEDIUM | eng/common/cross/build-rootfs.sh | 635 | # Create the symlink in the same directory |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 20 | |
| LOW | eng/common/cross/install-debs.py | 192 | |
| LOW | eng/common/cross/install-debs.py | 217 | |
| LOW | eng/common/cross/install-debs.py | 255 | |
| LOW | eng/common/cross/install-debs.py | 289 | |
| LOW | eng/common/cross/install-debs.py | 333 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …jectTemplates/content/McpServer-CSharp/local/README.md | 69 | 2. Publish to NuGet.org with `dotnet nuget push bin/Release/*.nupkg --api-key <your-api-key> --source https://api.nuget. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | eng/common/cross/install-debs.py | 42 | print(f"Error downloading {url}: {type(e).__name__} - {e}. Retrying...") |
| MEDIUM | eng/common/cross/install-debs.py | 202 | print(f"Error: Package '{current}' was not found in the available packages.") |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | …ent/McpServer-CSharp/common/Tools/RandomNumberTools.cs | 5 | /// Sample MCP tools for demonstration purposes. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | eng/common/cross/install-debs.py | 18 |