FP in C# XSS Sink
Aberta
acknowledged
C#
false-positive
- Linguagem predominante
- CodeQL
- Estrelas
- 10.1k
- Forks
- 2.1k
- Merge médio
- 2d 15h
- PRs com merge (30d)
- 141
Descrição
**Description of the false positive**
Use of asp-route-{parameter} in cshtml documents are url encoded, preventing breakout from string and thus preventing XSS despite the use of WriteLiteral in the compiled code.
**Code samples or links to source code**
```csharp
```
[MRVA Result](https://gist.githubusercontent.com/Kwstubbs/6e2307d324ceb6c3b4a8c50f9cb798ff/raw/1275c04dea523d6176ad8707820790e35d3aa4b4/result-2-AiursoftWeb-Infrastructures.md)
Guia de contribuição
Avaliação
Esta issue ainda não foi avaliada.