80 references to SecurityHelpers
Microsoft.CodeAnalysis.NetAnalyzers (80)
Microsoft.NetCore.Analyzers\Security\DataSetDataTableInIFormatterSerializableObjectGraphAnalyzer.cs (5)
26SecurityHelpers.CreateDiagnosticDescriptor( 94&& SecurityHelpers.BinaryFormatterDeserializationMethods.Contains(methodName)) 96&& SecurityHelpers.NetDataContractSerializerDeserializationMethods.Contains(methodName)) 98&& SecurityHelpers.ObjectStateFormatterDeserializationMethods.Contains(methodName)) 100&& SecurityHelpers.SoapFormatterDeserializationMethods.Contains(methodName)))
Microsoft.NetCore.Analyzers\Security\DataSetDataTableInSerializableObjectGraphAnalyzer.cs (1)
36SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DataSetDataTableInSerializableTypeAnalyzer.cs (3)
29SecurityHelpers.CreateDiagnosticDescriptor( 39SecurityHelpers.CreateDiagnosticDescriptor( 51SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DataSetDataTableInWebSerializableObjectGraphAnalyzer.cs (1)
26SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotAddArchiveItemPathToTheTargetFileSystemPath.cs (1)
18internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotDisableHttpClientCRLCheck.cs (2)
31internal static readonly DiagnosticDescriptor DefinitelyDisableHttpClientCRLCheckRule = SecurityHelpers.CreateDiagnosticDescriptor( 41internal static readonly DiagnosticDescriptor MaybeDisableHttpClientCRLCheckRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotHardCodeCertificate.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotHardCodeEncryptionKey.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotInstallRootCert.cs (2)
32internal static readonly DiagnosticDescriptor DefinitelyInstallRootCertRule = SecurityHelpers.CreateDiagnosticDescriptor( 42internal static readonly DiagnosticDescriptor MaybeInstallRootCertRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotSetSwitch.cs (2)
30internal static readonly DiagnosticDescriptor DoNotDisableSchUseStrongCryptoRule = SecurityHelpers.CreateDiagnosticDescriptor( 40internal static readonly DiagnosticDescriptor DoNotDisableSpmSecurityProtocolsRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotUseCreateEncryptorWithNonDefaultIV.cs (2)
30internal static readonly DiagnosticDescriptor DefinitelyUseCreateEncryptorWithNonDefaultIVRule = SecurityHelpers.CreateDiagnosticDescriptor( 40internal static readonly DiagnosticDescriptor MaybeUseCreateEncryptorWithNonDefaultIVRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotUseDataSetReadXml.cs (4)
23SecurityHelpers.CreateDiagnosticDescriptor( 33SecurityHelpers.CreateDiagnosticDescriptor( 48SecurityHelpers.IsOperationInsideAutogeneratedCodeForGuiApp(operationAnalysisContext, wellKnownTypeProvider); 56SecurityHelpers.DataSetDeserializationMethods;
Microsoft.NetCore.Analyzers\Security\DoNotUseDataTableReadXml.cs (2)
23SecurityHelpers.CreateDiagnosticDescriptor( 36SecurityHelpers.DataTableDeserializationMethods;
Microsoft.NetCore.Analyzers\Security\DoNotUseDeprecatedSecurityProtocols.cs (2)
24internal static readonly DiagnosticDescriptor DeprecatedRule = SecurityHelpers.CreateDiagnosticDescriptor( 34internal static readonly DiagnosticDescriptor HardCodedRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerBinaryFormatterMethods.cs (2)
23SecurityHelpers.CreateDiagnosticDescriptor( 37SecurityHelpers.BinaryFormatterDeserializationMethods;
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerBinaryFormatterWithoutBinder.cs (3)
23SecurityHelpers.CreateDiagnosticDescriptor( 33SecurityHelpers.CreateDiagnosticDescriptor( 48SecurityHelpers.BinaryFormatterDeserializationMethods;
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerJavascriptSerializerWithSimpleTypeResolver.cs (5)
34SecurityHelpers.CreateDiagnosticDescriptor( 44SecurityHelpers.CreateDiagnosticDescriptor( 81SecurityHelpers.JavaScriptSerializerDeserializationMethods.Select( 178&& SecurityHelpers.JavaScriptSerializerDeserializationMethods.Contains(invocationOperation.TargetMethod.Name)) 196&& SecurityHelpers.JavaScriptSerializerDeserializationMethods.Contains(methodReferenceOperation.Method.Name))
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerJsonNetWithoutBinder.cs (4)
36SecurityHelpers.CreateDiagnosticDescriptor( 46SecurityHelpers.CreateDiagnosticDescriptor( 106SecurityHelpers.JsonSerializerDeserializationMethods.Select( 158&& SecurityHelpers.JsonSerializerDeserializationMethods.Contains(
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerLosFormatter.cs (1)
22SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerNetDataContractSerializerMethods.cs (2)
23SecurityHelpers.CreateDiagnosticDescriptor( 37SecurityHelpers.NetDataContractSerializerDeserializationMethods;
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerNetDataContractSerializerWithoutBinder.cs (3)
23SecurityHelpers.CreateDiagnosticDescriptor( 33SecurityHelpers.CreateDiagnosticDescriptor( 48SecurityHelpers.NetDataContractSerializerDeserializationMethods;
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureDeserializerObjectStateFormatter.cs (1)
22SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\DoNotUseInsecureSettingsForJsonNet.cs (6)
35SecurityHelpers.CreateDiagnosticDescriptor( 45SecurityHelpers.CreateDiagnosticDescriptor( 105SecurityHelpers.JsonSerializerInstantiateWithSettingsMethods.Select( 112SecurityHelpers.JsonConvertWithSettingsMethods.Select( 167&& SecurityHelpers.JsonSerializerInstantiateWithSettingsMethods.Contains(invocationOperation.TargetMethod.Name) 171&& SecurityHelpers.JsonSerializerInstantiateWithSettingsMethods.Contains(invocationOperation.TargetMethod.Name)
Microsoft.NetCore.Analyzers\Security\DoNotUseWeakKDFInsufficientIterationCount.cs (2)
33internal static readonly DiagnosticDescriptor DefinitelyUseWeakKDFInsufficientIterationCountRule = SecurityHelpers.CreateDiagnosticDescriptor( 43internal static readonly DiagnosticDescriptor MaybeUseWeakKDFInsufficientIterationCountRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\JsonNetTypeNameHandling.cs (1)
26SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForCommandExecutionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForDllInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForFilePathInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForInformationDisclosureVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForLdapInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForOpenRedirectVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForRegexInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForSqlInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForXamlInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForXmlInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForXPathInjectionVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\ReviewCodeForXssVulnerabilities.cs (1)
16internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\SetHttpOnlyForHttpCookie.cs (1)
28internal static readonly DiagnosticDescriptor Rule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\SslProtocolsAnalyzer.cs (2)
25internal static readonly DiagnosticDescriptor DeprecatedRule = SecurityHelpers.CreateDiagnosticDescriptor( 35internal static readonly DiagnosticDescriptor HardcodedRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\UseAutoValidateAntiforgeryToken.cs (2)
29internal static readonly DiagnosticDescriptor UseAutoValidateAntiforgeryTokenRule = SecurityHelpers.CreateDiagnosticDescriptor( 39internal static readonly DiagnosticDescriptor MissHttpVerbAttributeRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\UseDefaultDllImportSearchPathsAttribute.cs (2)
25internal static readonly DiagnosticDescriptor UseDefaultDllImportSearchPathsAttributeRule = SecurityHelpers.CreateDiagnosticDescriptor( 35internal static readonly DiagnosticDescriptor DoNotUseUnsafeDllImportSearchPathRule = SecurityHelpers.CreateDiagnosticDescriptor(
Microsoft.NetCore.Analyzers\Security\UseSecureCookiesASPNetCore.cs (2)
30internal static readonly DiagnosticDescriptor DefinitelyUseSecureCookiesASPNetCoreRule = SecurityHelpers.CreateDiagnosticDescriptor( 40internal static readonly DiagnosticDescriptor MaybeUseSecureCookiesASPNetCoreRule = SecurityHelpers.CreateDiagnosticDescriptor(