Skip to content

Conversation

@wtgodbe
Copy link
Member

@wtgodbe wtgodbe commented Nov 10, 2025

Fixes a binskim alert

Copilot AI review requested due to automatic review settings November 10, 2025 18:33
@wtgodbe wtgodbe requested a review from a team as a code owner November 10, 2025 18:33
@github-actions github-actions bot added the area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions label Nov 10, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds Control Flow Guard (CFG) security protection to the ASP.NET Core Module Custom Action DLL linker configuration. CFG is a security mitigation feature that helps prevent exploitation of memory corruption vulnerabilities.

  • Adds /guard:cf linker flag to enable Control Flow Guard protection

@wtgodbe
Copy link
Member Author

wtgodbe commented Nov 10, 2025

/backport to release/10.0

@github-actions
Copy link
Contributor

Started backporting to release/10.0 (link to workflow run)

@wtgodbe wtgodbe merged commit fb8116a into main Nov 10, 2025
37 checks passed
@wtgodbe wtgodbe deleted the wtgodbe/CFGAgain branch November 10, 2025 20:51
@dotnet-policy-service dotnet-policy-service bot added this to the 11.0-preview1 milestone Nov 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-networking Includes servers, yarp, json patch, bedrock, websockets, http client factory, and http abstractions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants