11 Commits

Author	SHA1	Message	Date
Chad Bentz	4f1d6f472d	Fix test comments: replace GOOD/BAD markers with flow source descriptions ... Per review feedback, GOOD/BAD markers don't apply to flow source enumeration tests. Use descriptive comments instead. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-06-15 11:34:43 -04:00
Chad Bentz	ce9e61dbfd	C#: Add Razor Page handler method parameters as remote flow sources ... ASP.NET Core Razor Page handler method parameters (OnGet, OnPost, etc.) were not modeled as remote flow sources, causing security queries like SQL injection to miss vulnerabilities in PageModel subclasses. This adds AspNetCorePageHandlerMethodParameter, analogous to the existing AspNetCoreActionMethodParameter for MVC controllers, using the existing PageModelClass.getAHandlerMethod() from Razor.qll. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-06-12 19:50:12 -04:00
Michael Nebel	8060d2ff24	C#: Streamline the implementation for ASP.NET Core tainted members.	2026-04-21 13:40:02 +02:00
Michael Nebel	75772c5832	C#: Add abstract controller remote flow source example.	2024-08-21 13:00:10 +02:00
Michael Nebel	c3e0388a75	C#: Add testcase for complex models.	2022-08-19 08:51:39 +02:00
Michael Nebel	bbb6ba088b	C#: Add more Map like remote flow source testcases.	2022-08-19 08:10:23 +02:00
Michael Nebel	d2c5266139	C#: Add more test examples.	2022-08-19 08:10:23 +02:00
Michael Nebel	6e5a412150	C#: Make one more ASP.NET routing example.	2022-08-19 08:10:23 +02:00
Michael Nebel	328e47834e	C#: Add ASP.NET Core MapGet routing end point example.	2022-08-19 08:10:23 +02:00
Michael Nebel	1f2f2fff7f	C#: Update testcases with examples.	2022-06-16 08:43:06 +02:00
Michael Nebel	ef0a3d0a79	C#: Add testcase for controller parameter types tainted members.	2022-06-16 08:38:31 +02:00