David van Hoose comments

Repositories
Issues
Comments

Results 3 comments of


                                            David van Hoose

Rule 942200 triggers a substantial number of false positives.

> Yes, that is correct. JSON in Cookies is really a nightmare. There's nothing we can do on our side, at least not short-term. You will have to tune those...

Rule 942200 triggers a substantial number of false positives.

> > Anything being done in the long-term? > > What exactly do you mean? Any changes to the regular expressions to handle JSON in Cookies to prevent countless false...

System.ServiceModel.Primitives 8.0.0 transivitely uses vulnerable package System.Security.Cryptography.Pkcs 6.0.1

Why does the .NET 8 dependency list include .NET 6 package? There are older packages with dependency specifications for the older stuff. This feels like a lifecycle violation.