diff --git a/rules/S6932/csharp/rule.adoc b/rules/S6932/csharp/rule.adoc index 92a49e7dc2..3315c7ed28 100644 --- a/rules/S6932/csharp/rule.adoc +++ b/rules/S6932/csharp/rule.adoc @@ -69,7 +69,6 @@ public IActionResult Post() var name = Request.Form["name"]; // Noncompliant: Request.Form var birthdate = DateTime.Parse(Request.Form["Birthdate"]); // Noncompliant: Request.Form - var origin = Request.Headers[HeaderNames.Origin]; // Noncompliant: Request.Headers var locale = Request.Query.TryGetValue("locale", out var locales) ? locales.ToString() : "en-US"; // Noncompliant: Request.Query @@ -163,6 +162,17 @@ public ActionResult Post(User user, [Bind(Prefix = "locale")] string cultureName // ... } } + +public IActionResult Post() +{ + var origin = Request.Headers[HeaderNames.Origin]; // Compliant: Access via non-constant field + var nameField = "name"; + var name = Request.Form[nameField]; // Compliant: Access via local + var birthdate = DateTime.Parse(Request.Form["Birthdate"]); // Compliant: Access via constant and variable keys is mixed. + // Model binding would only work partially in the method, so we do not raise here. + return Ok(); + // .. +} ---- include::../how-does-this-work.adoc[]