False positive: Creating an ASP.NET debug binary may reveal sensitive information
- Langage dominant
- CodeQL
- Étoiles
- 10.1k
- Forks
- 2.1k
- Merge moyen
- 2 j 15 h
- PR mergées (30 j)
- 141
Description
**Description of the false positive**
CodeQL is firing "Creating an ASP.NET debug binary may reveal sensitive information" alert for the Web.config, where it has been already fixed in accordance with https://codeql.github.com/codeql-query-help/csharp/cs-web-debug-binary/ recommendations (debug’ flag should be set to false, or removed completely).
**Code samples or links to source code**
```
```
or
```
```
Guide de contribution
Ouvrir le guide de contribution
Piste de recherche
Start with the Web.config examples and compare them with the CodeQL query-help guidance for the ASP.NET debug binary alert. Trace the responsible CodeQL query and verify whether configurations with an omitted debug flag or debug="false" still produce an alert; done means the reported false positive is no longer flagged.
Rédigé par le modèle d'indexation à partir du texte de l'issue.
Évaluation
- Stack technique
- csharp
- Domaine
- security
- Type d'issue
- Bug
- Difficulté
- 3/5
- Temps estimé
- 1-2 jours
- Activité
- À l'abandon
- Clarté
- Plutôt claire
- Accessibilité débutants
- 38/100