46 references to SecurityDiagnosticHelpers
Microsoft.CodeAnalysis.NetAnalyzers (46)
Microsoft.NetFramework.Analyzers\DoNotUseInsecureDtdProcessing.cs (32)
112Version version = SecurityDiagnosticHelpers.GetDotNetFrameworkVersion(compilation); 263if (SecurityDiagnosticHelpers.HasXmlReaderParameter(method, _xmlTypes) < 0) 380if (SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Operand.Type, _xmlTypes)) 385else if (SecurityDiagnosticHelpers.IsExpressionEqualsNull(operation.Operand)) 450&& SecurityDiagnosticHelpers.IsXmlTextReaderXmlResolverPropertyDerived(prop, _xmlTypes)) 454if (SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Operand.Type, _xmlTypes)) 458else if (SecurityDiagnosticHelpers.IsExpressionEqualsNull(operation.Operand)) 467else if (SecurityDiagnosticHelpers.IsXmlTextReaderDtdProcessingPropertyDerived(prop, _xmlTypes)) 470env.IsDtdProcessingDisabled = !SecurityDiagnosticHelpers.IsExpressionEqualsDtdProcessingParse(propValue); 518if (SecurityDiagnosticHelpers.IsXmlReaderSettingsXmlResolverProperty( 529if (SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Operand.Type, _xmlTypes)) 533else if (SecurityDiagnosticHelpers.IsExpressionEqualsNull(operation.Operand)) 538else if (SecurityDiagnosticHelpers.IsXmlReaderSettingsDtdProcessingProperty(prop, _xmlTypes)) 540xmlReaderSettingsEnv.IsDtdProcessingDisabled = !SecurityDiagnosticHelpers.IsExpressionEqualsDtdProcessingParse(propValue); 542else if (SecurityDiagnosticHelpers.IsXmlReaderSettingsMaxCharactersFromEntitiesProperty(prop, _xmlTypes)) 544xmlReaderSettingsEnv.IsMaxCharactersFromEntitiesLimited = !SecurityDiagnosticHelpers.IsExpressionEqualsIntZero(propValue); 556if (conv != null && SecurityDiagnosticHelpers.IsXmlSecureResolverType(conv.Operand.Type, _xmlTypes)) 560else if (conv != null && SecurityDiagnosticHelpers.IsExpressionEqualsNull(conv.Operand)) 594if (isXmlTextReaderXmlResolverProperty && conv != null && SecurityDiagnosticHelpers.IsXmlSecureResolverType(conv.Operand.Type, _xmlTypes)) 598else if (isXmlTextReaderXmlResolverProperty && conv != null && SecurityDiagnosticHelpers.IsExpressionEqualsNull(conv.Operand)) 602else if (isXmlTextReaderDtdProcessingProperty && conv == null && !SecurityDiagnosticHelpers.IsExpressionEqualsDtdProcessingParse(expression.Value)) 604env.IsDtdProcessingDisabled = !SecurityDiagnosticHelpers.IsExpressionEqualsDtdProcessingParse(expression.Value); 640SecurityDiagnosticHelpers.IsXmlTextReaderXmlResolverPropertyDerived(propRef.Property, _xmlTypes); 642SecurityDiagnosticHelpers.IsXmlTextReaderDtdProcessingPropertyDerived(propRef.Property, _xmlTypes); 648else if (SecurityDiagnosticHelpers.IsXmlReaderSettingsType(propRef.Instance.Type, _xmlTypes)) 657if (assignment.Value is IConversionOperation conv && SecurityDiagnosticHelpers.IsXmlReaderSettingsXmlResolverProperty(propRef.Property, _xmlTypes)) 659if (SecurityDiagnosticHelpers.IsXmlSecureResolverType(conv.Operand.Type, _xmlTypes)) 663else if (SecurityDiagnosticHelpers.IsExpressionEqualsNull(conv.Operand)) 668else if (SecurityDiagnosticHelpers.IsXmlReaderSettingsDtdProcessingProperty(propRef.Property, _xmlTypes)) 671!SecurityDiagnosticHelpers.IsExpressionEqualsDtdProcessingParse(assignment.Value); 673else if (SecurityDiagnosticHelpers.IsXmlReaderSettingsMaxCharactersFromEntitiesProperty(propRef.Property, 677!SecurityDiagnosticHelpers.IsExpressionEqualsIntZero(assignment.Value);
Microsoft.NetFramework.Analyzers\DoNotUseInsecureDtdProcessingInApiDesign.cs (13)
56var version = SecurityDiagnosticHelpers.GetDotNetFrameworkVersion(compilation); 136SecurityDiagnosticHelpers.IsXmlDocumentXmlResolverProperty(property, _xmlTypes), 139|| SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Type, _xmlTypes), 160SecurityDiagnosticHelpers.GetNonEmptyParentName(methodSymbol) 186property => SecurityDiagnosticHelpers.IsXmlDocumentXmlResolverProperty(property, _xmlTypes), 189|| SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Type, _xmlTypes), 236SecurityDiagnosticHelpers.IsXmlTextReaderXmlResolverProperty(property, _xmlTypes), 239|| SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Type, _xmlTypes), 253SecurityDiagnosticHelpers.IsXmlTextReaderDtdProcessingProperty(property, _xmlTypes), 276SecurityDiagnosticHelpers.GetNonEmptyParentName(methodSymbol) 316SecurityDiagnosticHelpers.IsXmlTextReaderXmlResolverProperty(property, _xmlTypes), 319&& !SecurityDiagnosticHelpers.IsXmlSecureResolverType(operation.Type, _xmlTypes), 341SecurityDiagnosticHelpers.IsXmlTextReaderDtdProcessingProperty(property, _xmlTypes),
Microsoft.NetFramework.Analyzers\DoNotUseInsecureXSLTScriptExecution.cs (1)
182SecurityDiagnosticHelpers.GetNonEmptyParentName(_enclosingSymbol)