FP in C# XSS Sink
Abierto
acknowledged
C#
false-positive
- Lenguaje dominante
- CodeQL
- Estrellas
- 10.1k
- Forks
- 2.1k
- Merge medio
- 2 d 15 h
- PR fusionados (30 d)
- 141
Descripción
**Description of the false positive**
Use of asp-route-{parameter} in cshtml documents are url encoded, preventing breakout from string and thus preventing XSS despite the use of WriteLiteral in the compiled code.
**Code samples or links to source code**
```csharp
```
[MRVA Result](https://gist.githubusercontent.com/Kwstubbs/6e2307d324ceb6c3b4a8c50f9cb798ff/raw/1275c04dea523d6176ad8707820790e35d3aa4b4/result-2-AiursoftWeb-Infrastructures.md)
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.