mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
Merge pull request #6305 from intrigus-lgtm/patch-5
C# remove spurious spaces in <code> tag
This commit is contained in:
@@ -6,7 +6,7 @@
|
||||
<p>Writing directly to system output streams is often used as an unstructured form of logging. A
|
||||
proper logging mechanism is a better way to direct messages to the desired location and also
|
||||
ensures that no critical information is leaked to the standard outputs. The rule points out any
|
||||
call to the <code> Console.Write*(...)</code> methods and any access to <code>Console.Out</code> or
|
||||
call to the <code>Console.Write*(...)</code> methods and any access to <code>Console.Out</code> or
|
||||
<code>Console.Error</code>.</p>
|
||||
|
||||
</overview>
|
||||
|
||||
@@ -6,7 +6,7 @@
|
||||
<p>Relying on <code>HttpRequest</code> to provide access to a particular server variable is not
|
||||
safe as it can be overridden by the client. The <code>HttpRequest</code> class implements an
|
||||
indexer to provide a simplified, combined access to its <code>QueryString</code>, <code>Form</code>
|
||||
, <code>Cookies</code>, or <code> ServerVariables</code> collections, in that particular order.
|
||||
, <code>Cookies</code>, or <code>ServerVariables</code> collections, in that particular order.
|
||||
When searching for a variable, the first match is returned: <code>QueryString</code> parameters
|
||||
hence supersede values from forms, cookies and server variables, and so on. This is a serious
|
||||
attack vector since an attacker could inject a value in the query string that you do not expect,
|
||||
|
||||
@@ -6,8 +6,8 @@
|
||||
<p>Casts are often used when you iterate over a collection of elements of a type that is known to
|
||||
contain only elements of a different type (possibly more specific). For example, <code>List<Animal
|
||||
> </code> might refer to a collection of instances of <code>Dog</code>, a class derived from
|
||||
<code> Animal</code>. Programmers often write a loop to iterate over the collection and cast each
|
||||
<code> Animal</code> in turn to <code>Dog</code> before using it</p>
|
||||
<code>Animal</code>. Programmers often write a loop to iterate over the collection and cast each
|
||||
<code>Animal</code> in turn to <code>Dog</code> before using it</p>
|
||||
|
||||
</overview>
|
||||
<recommendation>
|
||||
|
||||
Reference in New Issue
Block a user