Create fortify.yml #2
Annotations
10 warnings
build:
InsecureWebApp/Query.cs#L27
The annotation for nullable reference types should only be used in code within a '#nullable' annotations context.
|
build:
InsecureWebApp/Startup.cs#L122
'DatabaseErrorPageExtensions.UseDatabaseErrorPage(IApplicationBuilder)' is obsolete: 'This is obsolete and will be removed in a future version. Use DatabaseDeveloperPageExceptionFilter instead, see documentation at https://aka.ms/DatabaseDeveloperPageExceptionFilter.'
|
build:
InsecureWebApp/Query.cs#L27
This async method lacks 'await' operators and will run synchronously. Consider using the 'await' operator to await non-blocking API calls, or 'await Task.Run(...)' to do CPU-bound work on a background thread.
|
build:
InsecureWebApp/Controllers/SiteController.cs#L121
'Dns.GetHostByAddress(IPAddress)' is obsolete: 'GetHostByAddress has been deprecated. Use GetHostEntry instead.'
|
build:
InsecureWebApp/Controllers/OrderController.cs#L89
'BinaryFormatter.Deserialize(Stream)' is obsolete: 'BinaryFormatter serialization is obsolete and should not be used. See https://aka.ms/binaryformatter for more information.' (https://aka.ms/dotnet-warnings/SYSLIB0011)
|
build:
InsecureWebApp/Controllers/CryptoController.cs#L27
'AesCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
build:
InsecureWebApp/Controllers/CryptoController.cs#L27
'AesCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
build:
InsecureWebApp/Controllers/CryptoController.cs#L73
'AesCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
build:
InsecureWebApp/Controllers/CryptoController.cs#L73
'AesCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
build:
InsecureWebApp/Controllers/CryptoController.cs#L111
'DESCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|