C#: Add another test for MissingAccessControl.ql

2025-12-16 08:43:11 +01:00 · 2025-06-20 11:49:30 +02:00
parent cdd6245b98
commit 84e93e2dc5
1 changed files with 8 additions and 0 deletions
--- a/Features/CWE-285/MissingAccessControl/MVCTests/ProfileController.cs
+++ b/Features/CWE-285/MissingAccessControl/MVCTests/ProfileController.cs
@@ -41,6 +41,14 @@ public class ProfileController : Controller
        doThings();
        return View();
    }
+
+    // GOOD: The Authorize attribute is used.
+    [Authorize("foo")]
+    public ActionResult Delete5(int id)
+    {
+        doThings();
+        return View();
+    }
 }

 [Authorize]