Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rule S3994: URI Parameters should not be strings #268

Closed
valhristov opened this issue May 3, 2017 · 0 comments
Closed

Rule S3994: URI Parameters should not be strings #268

valhristov opened this issue May 3, 2017 · 0 comments
Assignees
Labels
Type: New Feature This hasn't been here before.
Milestone

Comments

@valhristov
Copy link
Contributor

RSPEC-3994

String representations of URIs or URLs are prone to parsing and encoding errors which can lead to vulnerabilities. The System.Uri class is a safe alternative and should be preferred. At minimum, an overload of the method taking a System.Uri as a parameter should be provided.

This rule raises an issue when method has a string parameter whose name contains "uri", "Uri", "urn", "Urn", "url" or "Url" and the type doesn't declare a corresponding overload taking an System.Uri parameter instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: New Feature This hasn't been here before.
Projects
None yet
Development

No branches or pull requests

2 participants