Files
codeql/csharp/ql/test/query-tests/Security Features/CWE-502/UnsafeDeserializationUntrustedInput/ResourceReaderUntrustedInputGood.cs
2021-03-20 21:50:46 +02:00

20 lines
534 B
C#

using System.Web.UI.WebControls;
using System.Resources;
using System.IO;
using System.Text;
using System;
class GoodResourceReader
{
public static void Deserialize(TextBox data)
{
// GOOD
var ds = new ResourceReader(new MemoryStream(Encoding.UTF8.GetBytes("hardcoded")));
var dict = ds.GetEnumerator();
while (dict.MoveNext())
Console.WriteLine(" {0}: '{1}' (Type {2})",
dict.Key, dict.Value, dict.Value.GetType().Name);
ds.Close();
}
}