FxCop's security rule's sequence not working for Asp.net & MVC

Hi, I have a strange problem when I run FxCop’s AspNetSecurity rules against different types of web application (Asp.net & Asp.net MVC) __ I understand that order of the dlls in /rule (AspNetMvcSe...

Id #1977 | Release: None | Updated: Apr 25, 2016 at 6:26 AM by murugaperumalwin | Created: Apr 21, 2016 at 11:52 AM by murugaperumalwin

Nuget Support

Please release these officially as a Nuget package. They are very difficult to use on a build server without this support.   Thanks!

Id #1263 | Release: None | Updated: Mar 17, 2013 at 12:49 AM by wwwlicious | Created: Sep 23, 2012 at 6:00 PM by Iristyle

MarkVerbHandlersWithValidateAntiforgeryToken should check RedirectToRouteResult as well as ActionResult

Currently, MarkVerbHandlersWithValidateAntiforgeryToken only checks controllers that return an ActionResult. It should also check controllers that return a RedirectToRouteResult?

Id #625 | Release: None | Updated: Feb 14, 2013 at 2:00 AM by dblack | Created: May 1, 2011 at 8:34 AM by Strachan

Web.config Related Rules are not being enforced

Several Rules related to web.config settings are not being enforced.   My project file and the web.config are in the same directory, is this a problem?   Rules like the following are not being fire...

Id #594 | Release: None | Updated: Apr 20, 2016 at 7:22 AM by murugaperumalwin | Created: Mar 26, 2011 at 12:43 AM by AnthonyDiaz

Error loading rule "ViewStateUserKeyShouldBeSet"

Install the rules into C:\Program Files (x86)\Microsoft Fxcop 10.0\Rules\ Start FxCop A dialog with the following error message is displayed twice: Error(s) Loading Project Error Message ...

Id #525 | Release: None | Updated: Feb 14, 2013 at 2:00 AM by davebo | Created: Jan 17, 2011 at 3:45 AM by Strachan

For Web Projects - Directive rules not verified (e.g. ValidateRequestShouldBeEnabled)

For ASP.NET Web Projects, there is no way to verify some security rules, this only happens if you use the markup directives (e.g. setting the ValidateRequest attribute to false for the Page direct...

Id #499 | Release: None | Updated: Feb 14, 2013 at 2:00 AM by AnthonyDiaz | Created: Dec 15, 2010 at 2:41 PM by ivotadic

  • 1-6 of 6 Work Items
    • Previous
    • 1
    • Next
    • Showing
    • All
    • Work Items