Files
codeql/csharp/ql/test/query-tests/Security Features/CWE-451/MissingXFrameOptions/WebConfigAddedHeaderInLocation/MissingXFrameOptions.cs
Paolo Tranquilli c3fd06c8a4 Csharp: fix cs/web/missing-x-frame-options to also consider location elements
As explained in

https://learn.microsoft.com/en-us/previous-versions/aspnet/ms178692(v=vs.100),

it is possible to add `system.webServer` elements nested inside
`location` elements in `Web.config`.
2025-10-17 11:27:31 +02:00

19 lines
240 B
C#

using System;
using System.Web;
public class AddXFrameOptions : IHttpHandler
{
public void ProcessRequest(HttpContext ctx)
{
}
public bool IsReusable
{
get
{
return true;
}
}
}