False positive: "Missing function level access control" where public endpoint name contains "Edit"
Đang mở
C#
false-positive
- Ngôn ngữ chính
- CodeQL
- Star
- 10.1k
- Fork
- 2.1k
- Merge trung bình
- 2 ngày 15 giờ
- Pull request đã merge (30 ngày)
- 141
Mô tả
**Description of the false positive**
We have a .NET 8 Api.
We have a controller method that has the characters 'Edit' in it, but the whole word is not Edit. This causes the method to be marked with the rule cs/web/missing-function-level-access-control. The method even has the 'AllowAnonymous' attribute on it.
**Code samples or links to source code**
```
[AllowAnonymous]
public async Task TestEditionAsync(){
}
```
Is there a way to get this alert resolved?
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.