rspec/rules/S5332/csharp/rule.adoc

50 lines
1.1 KiB
Plaintext
Raw Normal View History

include::../description.adoc[]
include::../ask-yourself.adoc[]
include::../recommended.adoc[]
== Sensitive Code Example
[source,csharp]
----
var urlHttp = "http://example.com"; // Noncompliant
var urlFtp = "ftp://anonymous@example.com"; // Noncompliant
var urlTelnet = "telnet://anonymous@example.com"; // Noncompliant
----
[source,csharp]
----
using var smtp = new SmtpClient("host", 25); // Noncompliant, EnableSsl is not set
using var telnet = new MyTelnet.Client("host", port); // Noncompliant, rule raises Security Hotspot on any member containing "Telnet"
----
== Compliant Solution
2022-02-04 17:28:24 +01:00
[source,csharp]
----
var urlHttps = "https://example.com";
var urlSftp = "sftp://anonymous@example.com";
var urlSsh = "ssh://anonymous@example.com";
----
2022-02-04 17:28:24 +01:00
[source,csharp]
----
using var smtp = new SmtpClient("host", 25) { EnableSsl = true };
using var ssh = new MySsh.Client("host", port);
----
include::../exceptions.adoc[]
include::../see.adoc[]
ifdef::env-github,rspecator-view[]
'''
== Implementation Specification
(visible only on this page)
include::../message.adoc[]
endif::env-github,rspecator-view[]