55 lines
1.2 KiB
Plaintext
55 lines
1.2 KiB
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
Imports Microsoft.AspNetCore.Mvc
|
|
|
|
Public Class MyController
|
|
Inherits Controller
|
|
|
|
<HttpPost>
|
|
<DisableRequestSizeLimit> ' Sensitive: No size limit
|
|
<RequestSizeLimit(10000000)> ' Sensitive: 10MB is more than the recommended limit of 8MB
|
|
Public Function PostRequest(Model model) As IActionResult
|
|
' ...
|
|
End Function
|
|
|
|
<HttpPost>
|
|
<RequestFormLimits(MultipartBodyLengthLimit = 8000000)> ' Sensitive: 10MB is more than the recommended limit of 8MB
|
|
Public Function MultipartFormRequest(Model model) As IActionResult
|
|
' ...
|
|
End Function
|
|
|
|
End Class
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
----
|
|
Imports Microsoft.AspNetCore.Mvc
|
|
|
|
Public Class MyController
|
|
Inherits Controller
|
|
|
|
<HttpPost>
|
|
<RequestSizeLimit(8000000)> ' Compliant: 8MB
|
|
Public Function PostRequest(Model model) As IActionResult
|
|
' ...
|
|
End Function
|
|
|
|
<HttpPost>
|
|
<RequestFormLimits(MultipartBodyLengthLimit = 8000000)> ' Compliant: 8MB
|
|
Public Function MultipartFormRequest(Model model) AS IActionResult
|
|
' ...
|
|
End Function
|
|
|
|
End Class
|
|
----
|
|
|
|
include::../see.adoc[]
|