Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SDL | Changing ReadXml to a more secure overload. #2147

Merged
merged 2 commits into from Sep 14, 2023

Conversation

JRahnama
Copy link
Member

@JRahnama JRahnama commented Sep 5, 2023

Code Analysis detected CA3075, Unsafe overload of 'ReadXml' method, for LoadDataSetFromXml. Changing the XmlRead to a more secure overload will solve that issue, by setting XmlResolver to null.

@codecov
Copy link

codecov bot commented Sep 5, 2023

Codecov Report

Patch coverage is 100.00% of modified lines.

Files Changed Coverage
...c/Microsoft/Data/ProviderBase/DbMetaDataFactory.cs 100.00%

📢 Thoughts on this report? Let us know!.

@DavoudEshtehari DavoudEshtehari added the 💡 Enhancement New feature request label Sep 11, 2023
@DavoudEshtehari DavoudEshtehari added this to In progress in SqlClient v5.2 via automation Sep 11, 2023
SqlClient v5.2 automation moved this from In progress to Reviewer approved Sep 14, 2023
@DavoudEshtehari DavoudEshtehari merged commit 816a7d3 into dotnet:main Sep 14, 2023
132 checks passed
SqlClient v5.2 automation moved this from Reviewer approved to Done Sep 14, 2023
@JRahnama JRahnama deleted the sdl/Addressing-insecure-dtd branch March 8, 2024 01:09
dauinsight pushed a commit to dauinsight/SqlClient that referenced this pull request May 7, 2024
dauinsight added a commit that referenced this pull request May 8, 2024
Co-authored-by: Javad <v-jarahn@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
💡 Enhancement New feature request
Projects
No open projects
Development

Successfully merging this pull request may close these issues.

None yet

4 participants