René's URL Explorer Experiment

Title: GitHub - security-code-scan/security-code-scan.github.io: The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website

Open Graph Title: GitHub - security-code-scan/security-code-scan.github.io: The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website

X Title: GitHub - security-code-scan/security-code-scan.github.io: The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website

Description: The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website - security-code-scan/security-code-scan.github.io

Open Graph Description: The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website - security-code-scan/security-code-scan.github.io

X Description: The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website - security-code-scan/security-code-scan.github.io

Opengraph URL: https://github.com/security-code-scan/security-code-scan.github.io

X: @github

direct link

Domain: patch-diff.githubusercontent.com

route-pattern	/:user_id/:repository
route-controller	files
route-action	disambiguate
fetch-nonce	v2:2ce81d0f-cc89-0c6c-ff07-1d679b36f79b
current-catalog-service-hash	f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-id	C188:50BF:A30007:DA6EA8:69704322
html-safe-nonce	79cddce91ce4fb4696c67bf6d45754a63a87d7799ceb4d77178a887e72a38b2f
visitor-payload	eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDMTg4OjUwQkY6QTMwMDA3OkRBNkVBODo2OTcwNDMyMiIsInZpc2l0b3JfaWQiOiI0MzI3MTg4MDAwNjg5NjM2MTMwIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac	8adc712772082f19ead63cf35c741f5a277c4bc002781867e4b0582a887094d8
hovercard-subject-tag	repository:115855439
github-keyboard-shortcuts	repository,copilot
google-site-verification	Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-url	https://collector.github.com/github/collect
analytics-location	//
fb:app_id	1401488693436528
apple-itunes-app	app-id=1477376905, app-argument=https://github.com/security-code-scan/security-code-scan.github.io
twitter:image	https://opengraph.githubassets.com/47a16a099feffb0692c137b27d1c8071ddbb0ae4ae3f924b7d32e71267100033/security-code-scan/security-code-scan.github.io
twitter:card	summary_large_image
og:image	https://opengraph.githubassets.com/47a16a099feffb0692c137b27d1c8071ddbb0ae4ae3f924b7d32e71267100033/security-code-scan/security-code-scan.github.io
og:image:alt	The webpage is periodically updated from https://github.com/security-code-scan/security-code-scan/tree/vs2019/website - security-code-scan/security-code-scan.github.io
og:image:width	1200
og:image:height	600
og:site_name	GitHub
og:type	object
hostname	github.com
expected-hostname	github.com
None	9920a62ba22d06470388e2904804fb7e5ec51c9e35f81784e9191394c74b2bd2
turbo-cache-control	no-preview
go-import	github.com/security-code-scan/security-code-scan.github.io git https://github.com/security-code-scan/security-code-scan.github.io.git
octolytics-dimension-user_id	34749455
octolytics-dimension-user_login	security-code-scan
octolytics-dimension-repository_id	115855439
octolytics-dimension-repository_nwo	security-code-scan/security-code-scan.github.io
octolytics-dimension-repository_public	true
octolytics-dimension-repository_is_fork	false
octolytics-dimension-repository_network_root_id	115855439
octolytics-dimension-repository_network_root_nwo	security-code-scan/security-code-scan.github.io
turbo-body-classes	logged-out env-production page-responsive
disable-turbo	false
browser-stats-url	https://api.github.com/_private/browser/stats
browser-errors-url	https://api.github.com/_private/browser/errors
release	f643964067a552f02067066d6a910b2f90a5721f
ui-target	full
theme-color	#1e2327
color-scheme	light dark

Links:

Skip to content	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#start-of-content
	https://patch-diff.githubusercontent.com/
Sign in	https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
GitHub CopilotWrite better code with AI	https://github.com/features/copilot
GitHub SparkBuild and deploy intelligent apps	https://github.com/features/spark
GitHub ModelsManage and compare prompts	https://github.com/features/models
MCP RegistryNewIntegrate external tools	https://github.com/mcp
ActionsAutomate any workflow	https://github.com/features/actions
CodespacesInstant dev environments	https://github.com/features/codespaces
IssuesPlan and track work	https://github.com/features/issues
Code ReviewManage code changes	https://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilities	https://github.com/security/advanced-security
Code securitySecure your code as you build	https://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they start	https://github.com/security/advanced-security/secret-protection
Why GitHub	https://github.com/why-github
Documentation	https://docs.github.com
Blog	https://github.blog
Changelog	https://github.blog/changelog
Marketplace	https://github.com/marketplace
View all features	https://github.com/features
Enterprises	https://github.com/enterprise
Small and medium teams	https://github.com/team
Startups	https://github.com/enterprise/startups
Nonprofits	https://github.com/solutions/industry/nonprofits
App Modernization	https://github.com/solutions/use-case/app-modernization
DevSecOps	https://github.com/solutions/use-case/devsecops
DevOps	https://github.com/solutions/use-case/devops
CI/CD	https://github.com/solutions/use-case/ci-cd
View all use cases	https://github.com/solutions/use-case
Healthcare	https://github.com/solutions/industry/healthcare
Financial services	https://github.com/solutions/industry/financial-services
Manufacturing	https://github.com/solutions/industry/manufacturing
Government	https://github.com/solutions/industry/government
View all industries	https://github.com/solutions/industry
View all solutions	https://github.com/solutions
AI	https://github.com/resources/articles?topic=ai
Software Development	https://github.com/resources/articles?topic=software-development
DevOps	https://github.com/resources/articles?topic=devops
Security	https://github.com/resources/articles?topic=security
View all topics	https://github.com/resources/articles
Customer stories	https://github.com/customer-stories
Events & webinars	https://github.com/resources/events
Ebooks & reports	https://github.com/resources/whitepapers
Business insights	https://github.com/solutions/executive-insights
GitHub Skills	https://skills.github.com
Documentation	https://docs.github.com
Customer support	https://support.github.com
Community forum	https://github.com/orgs/community/discussions
Trust center	https://github.com/trust-center
Partners	https://github.com/partners
GitHub SponsorsFund open source developers	https://github.com/sponsors
Security Lab	https://securitylab.github.com
Maintainer Community	https://maintainers.github.com
Accelerator	https://github.com/accelerator
Archive Program	https://archiveprogram.github.com
Topics	https://github.com/topics
Trending	https://github.com/trending
Collections	https://github.com/collections
Enterprise platformAI-powered developer platform	https://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security features	https://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI features	https://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 support	https://github.com/premium-support
Pricing	https://github.com/pricing
Search syntax tips	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentation	https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in	https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
Sign up	https://patch-diff.githubusercontent.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=security-code-scan%2Fsecurity-code-scan.github.io
Reload	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Reload	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Reload	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
security-code-scan	https://patch-diff.githubusercontent.com/security-code-scan
security-code-scan.github.io	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Notifications	https://patch-diff.githubusercontent.com/login?return_to=%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
Fork 5	https://patch-diff.githubusercontent.com/login?return_to=%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
Star 7	https://patch-diff.githubusercontent.com/login?return_to=%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
https://github.com/security-code-scan/security-code-scan/tree/vs2019/website	https://github.com/security-code-scan/security-code-scan/tree/vs2019/website
security-code-scan.github.io	https://security-code-scan.github.io
7 stars	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/stargazers
5 forks	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/forks
Branches	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/branches
Tags	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tags
Activity	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/activity
Star	https://patch-diff.githubusercontent.com/login?return_to=%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
Notifications	https://patch-diff.githubusercontent.com/login?return_to=%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io
Code	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Pull requests 0	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/pulls
Actions	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/actions
Security Uh oh! There was an error while loading. Please reload this page.	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/security
Please reload this page	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Insights	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/pulse
Code	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Pull requests	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/pulls
Actions	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/actions
Security	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/security
Insights	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/pulse
Branches	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/branches
Tags	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tags
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/branches
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tags
156 Commits	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/commits/master/
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/commits/master/
.github/workflows	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/.github/workflows
.github/workflows	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/.github/workflows
_layouts	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/_layouts
_layouts	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/_layouts
components	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/components
components	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/components
images	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/images
images	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/images
javascripts	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/javascripts
javascripts	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/javascripts
stylesheets	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/stylesheets
stylesheets	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/tree/master/stylesheets
.gitignore	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/.gitignore
.gitignore	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/.gitignore
README.md	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/README.md
README.md	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/README.md
_config.yml	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/_config.yml
_config.yml	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/_config.yml
favicon.ico	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/favicon.ico
favicon.ico	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/favicon.ico
README	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#quick-facts
Open Source	https://github.com/security-code-scan/security-code-scan
security vulnerability patterns	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#rules
GitHub	https://github.com/marketplace/actions/securitycodescan
GitLab	https://docs.gitlab.com/ee/user/application_security/sast/analyzers.html
Stand-alone runner	https://www.nuget.org/packages/security-scan/
MSBuild	https://msdn.microsoft.com/en-us/library/dd393574.aspx
.NET Core	https://en.wikipedia.org/wiki/.NET_Framework#.NET_Core
Community	https://www.visualstudio.com/en-us/products/visual-studio-community-vs.aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#installation
GitHub	https://github.com/marketplace/actions/securitycodescan
GitLab	https://docs.gitlab.com/ee/user/application_security/sast/analyzers.html
Stand-alone runner	https://www.nuget.org/packages/security-scan/
can be installed as	https://docs.microsoft.com/en-us/visualstudio/code-quality/install-roslyn-analyzers
Visual Studio extension	https://marketplace.visualstudio.com/items?itemName=JaroslavLobacevski.SecurityCodeScanVS2019
NuGet package	https://www.nuget.org/packages/SecurityCodeScan.VS2019/
Stand-alone runner	https://www.nuget.org/packages/security-scan/
GitHub Releases	https://github.com/security-code-scan/security-code-scan/releases
mismatch between the used compiler toolset/SDK and the version of Roslyn analyzer library used by SCS	https://github.com/dotnet/roslyn/issues/2683
MSBuild	https://msdn.microsoft.com/en-us/library/dd393574.aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/security-scan-tool.png
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#integration-with-continuous-integration-ci-builds-and-third-party-tools
GitHub	https://github.com/marketplace/actions/securitycodescan
GitLab	https://docs.gitlab.com/ee/user/application_security/sast/analyzers.html
Stand-alone runner	https://www.nuget.org/packages/security-scan/
MSBuild	https://msdn.microsoft.com/en-us/library/dd393574.aspx
script	https://github.com/SPoint42/SecurityTools/tree/main/SCDotNet2DefectDojo
DefectDojo	https://github.com/DefectDojo/django-DefectDojo
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#configuration
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#background-analysis-scope
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/fullsolution.png
additional information	https://docs.microsoft.com/en-us/visualstudio/code-quality/how-to-enable-and-disable-full-solution-analysis-for-managed-code
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#testing-on-webgoatnet
WebGoat.NET	https://github.com/OWASP/WebGoat.NET/zipball/master
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/intellisense.png
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/output.png
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#analyzing-aspx-and-webconfig-files
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#external-configuration-files
built-in configuration	https://github.com/security-code-scan/security-code-scan/blob/vs2019/SecurityCodeScan/Config/Main.yml
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/additionalfiles.png
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#custom-taint-source-sinks-sanitizers-and-validators
configuration file	https://github.com/security-code-scan/security-code-scan/blob/vs2019/SecurityCodeScan/Config/Main.yml
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#audit-mode
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#suppressing-and-fixing-the-warnings
standard functionality for Visual Studio	https://docs.microsoft.com/en-us/visualstudio/code-quality/in-source-suppression-overview
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/suppresscontextmenu.png
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/suppresserrorlist.png
it's own documentation	https://docs.microsoft.com/en-us/visualstudio/code-quality/use-roslyn-analyzers
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#severity
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/blob/master/images/severity.png
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#troubleshooting
affect results from other analyzers	https://github.com/dotnet/roslyn/issues/23879
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#rules
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references
OWASP: Top 10 2013-A1-Injection	https://www.owasp.org/index.php/Top_10_2013-A1-Injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0001---command-injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-1
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	https://cwe.mitre.org/data/definitions/78.html
OWASP: Command Injection	https://www.owasp.org/index.php/Command_Injection
OWASP: Top 10 2013-A1-Injection	https://www.owasp.org/index.php/Top_10_2013-A1-Injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0002---sql-injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-1
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-1
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-1
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-2
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	https://cwe.mitre.org/data/definitions/89.html
WASC-19: SQL Injection	http://projects.webappsec.org/w/page/13246963/SQL%20Injection
OWASP: SQL Injection Prevention Cheat Sheet	https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet
OWASP: Query Parameterization Cheat Sheet	https://www.owasp.org/index.php/Query_Parameterization_Cheat_Sheet
CAPEC-66: SQL Injection	http://capec.mitre.org/data/definitions/66.html
Bobby Tables: A guide to preventing SQL injection	http://bobby-tables.com/csharp
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0003---xpath-injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-2
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-2
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-2
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-3
CWE-643: Improper Neutralization of Data within XPath Expressions ('XPath Injection')	https://cwe.mitre.org/data/definitions/643.html
WASC-39: XPath Injection	http://projects.webappsec.org/w/page/13247005/XPath%20Injection
OWASP: XPATH Injection	https://www.owasp.org/index.php/XPATH_Injection
Black Hat Europe 2012: Hacking XPath 2.0	http://media.blackhat.com/bh-eu-12/Siddharth/bh-eu-12-Siddharth-Xpath-WP.pdf
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0007---xml-external-entity-injection-xxe
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-3
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-3
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-3
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-4
CWE-611: Improper Restriction of XML External Entity Reference ('XXE')	https://cwe.mitre.org/data/definitions/611.html
OWASP.org: XML External Entity (XXE) Prevention Cheat Sheet (.NET)	https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet#.NET
CERT: IDS10-J. Prevent XML external entity attacks	https://www.securecoding.cert.org/confluence/pages/viewpage.action?pageId=61702260
OWASP.org: XML External Entity (XXE) Processing	https://www.owasp.org/index.php/XML_External_Entity_%28XXE%29_Processing
WS-Attacks.org: XML Entity Expansion	http://www.ws-attacks.org/index.php/XML_Entity_Expansion
WS-Attacks.org: XML External Entity DOS	http://www.ws-attacks.org/index.php/XML_External_Entity_DOS
WS-Attacks.org: XML Entity Reference Attack	http://www.ws-attacks.org/index.php/XML_Entity_Reference_Attack
Identifying Xml eXternal Entity vulnerability (XXE)	http://blog.h3xstream.com/2014/06/identifying-xml-external-entity.html
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0018---path-traversal
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-4
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-4
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-4
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-5
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	https://cwe.mitre.org/data/definitions/22.html
OWASP: Path Traversal	https://www.owasp.org/index.php/Path_Traversal
OS Command Injection, Path Traversal & Local File Inclusion Vulnerability - Notes	https://riseandhack.blogspot.com/2015/02/os-command-injection-path-traversal.html
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0029---cross-site-scripting-xss
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-5
HTTP-only	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0009
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-5
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-5
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-6
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	https://cwe.mitre.org/data/definitions/79.html
WASC-8: Cross Site Scripting	http://projects.webappsec.org/w/page/13246920/Cross%20Site%20Scripting
OWASP: XSS Prevention Cheat Sheet	https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet
OWASP: Top 10 2013-A3: Cross-Site Scripting (XSS)	https://www.owasp.org/index.php/Top_10_2013-A3-Cross-Site_Scripting_%28XSS%29
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0026---ldap-distinguished-name-injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-6
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-6
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-6
AntiXSS library	https://www.nuget.org/packages/AntiXSS/
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-7
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')	https://cwe.mitre.org/data/definitions/90.html
WASC-29: LDAP Injection	http://projects.webappsec.org/w/page/13246947/LDAP%20Injection
OWASP: LDAP Injection	https://www.owasp.org/index.php/LDAP_injection
OWASP: LDAP Injection Prevention Cheat Sheet	https://www.owasp.org/index.php/LDAP_Injection_Prevention_Cheat_Sheet
MSDN Blog - Security Tools: LDAP Injection and mitigation	https://blogs.msdn.microsoft.com/securitytools/2009/08/10/ldap-injection-and-mitigation/
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0031---ldap-filter-injection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-7
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-7
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-7
AntiXSS library	https://www.nuget.org/packages/AntiXSS/
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-8
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')	https://cwe.mitre.org/data/definitions/90.html
WASC-29: LDAP Injection	http://projects.webappsec.org/w/page/13246947/LDAP%20Injection
OWASP: LDAP Injection	https://www.owasp.org/index.php/LDAP_injection
OWASP: LDAP Injection Prevention Cheat Sheet	https://www.owasp.org/index.php/LDAP_Injection_Prevention_Cheat_Sheet
MSDN Blog - Security Tools: LDAP Injection and mitigation	https://blogs.msdn.microsoft.com/securitytools/2009/08/10/ldap-injection-and-mitigation/
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#cryptography
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0004---certificate-validation-disabled
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-8
certificate authority	http://en.wikipedia.org/wiki/Certificate_authority
Man-in-the-middle attacks	http://en.wikipedia.org/wiki/Man-in-the-middle_attack
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-8
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-8
certificate pinning	https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-9
CWE-295: Improper Certificate Validation	https://cwe.mitre.org/data/definitions/295.html
WASC-04: Insufficient Transport Layer Protection	http://projects.webappsec.org/w/page/13246945/Insufficient%20Transport%20Layer%20Protection
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0005---weak-random-number-generator
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-9
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-9
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-9
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-10
CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	https://cwe.mitre.org/data/definitions/338.html
OWASP: Insecure Randomness	https://www.owasp.org/index.php/Insecure_Randomness
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0006---weak-hashing-function
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-10
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-10
adaptive algorithms	https://crackstation.net/hashing-security.htm
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-11
CWE-327: Use of a Broken or Risky Cryptographic Algorithm	https://cwe.mitre.org/data/definitions/327.html
MSDN: SHA256 Class documentation	https://msdn.microsoft.com/en-us/library/system.security.cryptography.sha256(v=vs.110).aspx
Salted Password Hashing - Doing it Right	https://crackstation.net/hashing-security.htm
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0010---weak-cipher-algorithm
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-10
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-11
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-11
Solution in Weak Cipher Mode	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0013
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-12
CWE-327: Use of a Broken or Risky Cryptographic Algorithm	https://cwe.mitre.org/data/definitions/327.html
NIST Withdraws Outdated Data Encryption Standard	http://www.nist.gov/itl/fips/060205_des.cfm
StackOverflow: Authenticated encryption example	http://stackoverflow.com/questions/202011/encrypt-and-decrypt-a-string/10366194#10366194
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0013---potential-usage-of-weak-ciphermode-mode
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-11
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-12
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-12
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-13
CWE-327: Use of a Broken or Risky Cryptographic Algorithm	https://cwe.mitre.org/data/definitions/327.html
Padding Oracles for the masses (by Matias Soler)	http://www.infobytesec.com/down/paddingoracle_openjam.pdf
Wikipedia: Authenticated encryption	http://en.wikipedia.org/wiki/Authenticated_encryption
NIST: Authenticated Encryption Modes	http://csrc.nist.gov/groups/ST/toolkit/BCM/modes_development.html#01
CAPEC: Padding Oracle Crypto Attack	http://capec.mitre.org/data/definitions/463.html
Wikipedia: ECB mode	https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Electronic_Codebook_(ECB)
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#cookies
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0008---cookie-without-ssl-flag
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-12
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-13
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-13
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-14
CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute	https://cwe.mitre.org/data/definitions/614.html
OWASP: Secure Flag	https://www.owasp.org/index.php/SecureFlag
Rapid7: Missing Secure Flag From SSL Cookie	https://www.rapid7.com/db/vulnerabilities/http-cookie-secure-flag
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0009---cookie-without-httponly-flag
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-13
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-14
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-14
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-15
CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag	https://cwe.mitre.org/data/definitions/1004.html
Coding Horror blog: Protecting Your Cookies: HttpOnly	http://blog.codinghorror.com/protecting-your-cookies-httponly/
OWASP: HttpOnly	https://www.owasp.org/index.php/HttpOnly
Rapid7: Missing HttpOnly Flag From Cookie	https://www.rapid7.com/db/vulnerabilities/http-cookie-http-only-flag
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#view-state
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0023---view-state-not-encrypted
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-14
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-15
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-15
machine key	https://msdn.microsoft.com/en-us/library/w8h3skw9(v=vs.100).aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-16
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework	https://cwe.mitre.org/data/definitions/554.html
MSDN: pages Element (ASP.NET Settings Schema)	https://msdn.microsoft.com/en-us/library/950xf363(v=vs.100).aspx
MSDN: ViewStateEncryptionMode Property	https://msdn.microsoft.com/en-us/library/system.web.configuration.pagessection.viewstateencryptionmode(v=vs.100).aspx
MSDN: machineKey Element (ASP.NET Settings Schema)	https://msdn.microsoft.com/en-us/library/w8h3skw9(v=vs.100).aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0024---view-state-mac-disabled
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-15
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-16
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-16
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-17
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework	https://cwe.mitre.org/data/definitions/554.html
MSDN: pages Element (ASP.NET Settings Schema)	https://msdn.microsoft.com/en-us/library/950xf363(v=vs.100).aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#request-validation
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0017---request-validation-disabled-attribute
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-16
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-17
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-17
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-18
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework	https://cwe.mitre.org/data/definitions/554.html
MSDN: Request Validation in ASP.NET	https://msdn.microsoft.com/en-us/library/hh882339(v=vs.110).aspx
OWASP: ASP.NET Request Validation	https://www.owasp.org/index.php/ASP.NET_Request_Validation
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0021---request-validation-disabled-configuration-file
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-17
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-18
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-18
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-19
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework	https://cwe.mitre.org/data/definitions/554.html
MSDN: pages Element (ASP.NET Settings Schema)	https://msdn.microsoft.com/en-us/library/950xf363(v=vs.100).aspx
MSDN: Request Validation in ASP.NET	https://msdn.microsoft.com/en-us/library/hh882339(v=vs.110).aspx
OWASP: ASP.NET Request Validation	https://www.owasp.org/index.php/ASP.NET_Request_Validation
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0030---request-validation-is-enabled-only-for-pages-configuration-file
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-18
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-19
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-19
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-20
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework	https://cwe.mitre.org/data/definitions/554.html
MSDN: pages Element (ASP.NET Settings Schema)	https://msdn.microsoft.com/en-us/library/950xf363(v=vs.100).aspx
MSDN: Request Validation in ASP.NET	https://msdn.microsoft.com/en-us/library/hh882339(v=vs.110).aspx
OWASP: ASP.NET Request Validation	https://www.owasp.org/index.php/ASP.NET_Request_Validation
MSDN: RequestValidationMode Property	https://msdn.microsoft.com/en-us/library/system.web.configuration.httpruntimesection.requestvalidationmode(v=vs.110).aspx
XSS	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0029
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#password-management
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0015---hardcoded-password
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-19
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-20
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-20
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-21
CWE-259: Use of Hard-coded Password	https://cwe.mitre.org/data/definitions/259.html
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0034---password-requiredlength-not-set
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-20
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-21
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-21
Password Complexity	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0033
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-22
CWE-521: Weak Password Requirements	https://cwe.mitre.org/data/definitions/521.html
MSDN: ASP.NET Identity PasswordValidator Class	https://msdn.microsoft.com/en-us/library/microsoft.aspnet.identity.passwordvalidator.aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0032---password-requiredlength-too-small
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-21
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-22
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-22
Password Complexity	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0033
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-23
CWE-521: Weak Password Requirements	https://cwe.mitre.org/data/definitions/521.html
MSDN: ASP.NET Identity PasswordValidator Class	https://msdn.microsoft.com/en-us/library/microsoft.aspnet.identity.passwordvalidator.aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0033---password-complexity
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-22
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-23
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-23
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-24
CWE-521: Weak Password Requirements	https://cwe.mitre.org/data/definitions/521.html
MSDN: ASP.NET Identity PasswordValidator Class	https://msdn.microsoft.com/en-us/library/microsoft.aspnet.identity.passwordvalidator.aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#other
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0011---unsafe-xslt-setting-used
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-23
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-24
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-25
CWE-611: Improper Restriction of XML External Entity Reference	https://cwe.mitre.org/data/definitions/611.html
XSLT Server Side Injection Attacks	https://www.contextis.com/us/blog/xslt-server-side-injection-attacks
XML Attack for C# Remote Code Execution	https://zerosum0x0.blogspot.com/2016/05/xml-attack-for-c-remote-code-execution.html
XsltSettings.EnableScript Property	https://docs.microsoft.com/en-us/dotnet/api/system.xml.xsl.xsltsettings.enablescript?view=net-5.0
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0012---controller-method-is-potentially-vulnerable-to-authorization-bypass
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-24
customize	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#external-configuration-files
rule	https://github.com/security-code-scan/security-code-scan/blob/6541aa9c52e856b2ce9da7d5916d8358760373da/SecurityCodeScan/Config/Main.yml#L2500
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-25
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-24
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-26
CWE-284: Improper Access Control	https://cwe.mitre.org/data/definitions/284.html
Access control vulnerabilities and privilege escalation	https://portswigger.net/web-security/access-control
Simple authorization in ASP.NET Core	https://docs.microsoft.com/en-us/aspnet/core/security/authorization/simple?view=aspnetcore-3.1
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0016---cross-site-request-forgery-csrf
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-25
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-26
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-25
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-27
CWE-352: Cross-Site Request Forgery (CSRF)	https://cwe.mitre.org/data/definitions/352.html
OWASP: Cross-Site Request Forgery	https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)
OWASP: CSRF Prevention Cheat Sheet	https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29_Prevention_Cheat_Sheet
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0019---outputcache-conflict
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-26
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-27
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-26
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-28
CWE-524: Use of Cache Containing Sensitive Information	https://cwe.mitre.org/data/definitions/524.html
Improving Performance with Output Caching	https://docs.microsoft.com/en-us/aspnet/mvc/overview/older-versions-1/controllers-and-routing/improving-performance-with-output-caching-cs
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0022---event-validation-disabled
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-27
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-28
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-27
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-29
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework	https://cwe.mitre.org/data/definitions/554.html
MSDN: pages Element (ASP.NET Settings Schema)	https://msdn.microsoft.com/en-us/library/950xf363(v=vs.100).aspx
MSDN: Page.EnableEventValidation Property	http://msdn.microsoft.com/en-us/library/system.web.ui.page.enableeventvalidation.aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0027---open-redirect
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-28
phishing	https://en.wikipedia.org/wiki/Phishing
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-29
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-28
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-30
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')	https://cwe.mitre.org/data/definitions/601.html
Microsoft: Preventing Open Redirection Attacks (C#)	https://docs.microsoft.com/en-us/aspnet/mvc/overview/security/preventing-open-redirection-attacks
OWASP: Unvalidated Redirects and Forwards Cheat Sheet	https://www.owasp.org/index.php/Unvalidated_Redirects_and_Forwards_Cheat_Sheet
Hacksplaining: preventing malicious redirects	https://www.hacksplaining.com/prevention/open-redirects
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#scs0028---insecure-deserialization
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#risk-29
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#vulnerable-code-30
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#solution-29
Data Transfer Objects (DTO)	https://en.wikipedia.org/wiki/Data_transfer_object
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#references-31
CWE-502: Deserialization of Untrusted Data	https://cwe.mitre.org/data/definitions/502.html
BlackHat USA 2017: Friday the 13th: JSON Attacks	https://www.blackhat.com/docs/us-17/thursday/us-17-Munoz-Friday-The-13th-Json-Attacks.pdf
BlueHat v17: Dangerous Contents - Securing .Net Deserialization	https://www.slideshare.net/MSbluehat/dangerous-contents-securing-net-deserialization
BlackHat USA 2012: Are you my type?	https://media.blackhat.com/bh-us-12/Briefings/Forshaw/BH_US_12_Forshaw_Are_You_My_Type_Slides.pdf
OWASP: Deserialization of untrusted data	https://www.owasp.org/index.php/Deserialization_of_untrusted_data
Deserialization payload generator for a variety of .NET formatters	https://github.com/pwntester/ysoserial.net
.NET Deserialization Passive Scanner	https://github.com/pwntester/dotnet-deserialization-scanner
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#release-notes
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#567
@matteo-tosi	https://github.com/matteo-tosi
#262	https://github.com/security-code-scan/security-code-scan/pull/262
Full Changelog	https://github.com/security-code-scan/security-code-scan/compare/5.6.6%E2%80%A65.6.7
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#566
#258	https://github.com/security-code-scan/security-code-scan/issues/258
Full Changelog	https://github.com/security-code-scan/security-code-scan/compare/5.6.5%E2%80%A65.6.6
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#565
#257	https://github.com/security-code-scan/security-code-scan/issues/257
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#564
#246	https://github.com/security-code-scan/security-code-scan/issues/246
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#563
#248	https://github.com/security-code-scan/security-code-scan/pull/248
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#562
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#561
#239	https://github.com/security-code-scan/security-code-scan/issues/239
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#560
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#521
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#510
script	https://github.com/SPoint42/SecurityTools/tree/main/SCDotNet2DefectDojo
Sebastien gioria	https://github.com/SPoint42
DefectDojo	https://github.com/DefectDojo/django-DefectDojo
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#500
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#353
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#352
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#350
@watfordgnf	https://github.com/watfordgnf
@indy-singh	https://github.com/indy-singh
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#340
ReportAnalysisCompletion	https://github.com/security-code-scan/security-code-scan/commit/792c265cd218ea7abb8433d52ca159eb90ab91ae#diff-34b8f54577569f3aae468b7f58cc5d02
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#330
@kevin-montrose	https://github.com/kevin-montrose
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#320
#117	https://github.com/security-code-scan/security-code-scan/issues/117
#71	https://github.com/security-code-scan/security-code-scan/issues/71
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#310
Andrei!	https://github.com/zaichenko
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#300
contributors	https://github.com/security-code-scan/security-code-scan/graphs/contributors
issues or feature requests	https://github.com/security-code-scan/security-code-scan/issues?utf8=%E2%9C%93&q=is%3Aissue
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#280
microsoft/dotnet 2.1 docker container	https://hub.docker.com/r/microsoft/dotnet/
SecurityCodeScan.VS2017 NuGet package	https://www.nuget.org/packages/SecurityCodeScan.VS2017
built-in configuration	https://github.com/security-code-scan/security-code-scan/blob/master/SecurityCodeScan/Config/Main.yml
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#271
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#270
Insecure deserialization analyzers	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#SCS0028
Json.NET	https://www.newtonsoft.com/json
BinaryFormatter	https://msdn.microsoft.com/en-us/library/system.runtime.serialization.formatters.binary.binaryformatter(v=vs.110).aspx
FastJSON	https://github.com/mgholam/fastJSON
JavaScriptSerializer	https://msdn.microsoft.com/en-us/library/system.web.script.serialization.javascriptserializer(v=vs.110).aspx
DataContractJsonSerializer	https://msdn.microsoft.com/en-us/library/system.runtime.serialization.json.datacontractjsonserializer(v=vs.110).aspx
NetDataContractSerializer	https://msdn.microsoft.com/en-us/library/system.runtime.serialization.netdatacontractserializer(v=vs.110).aspx
XmlSerializer	https://msdn.microsoft.com/en-us/library/system.xml.serialization.xmlserializer(v=vs.110).aspx
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#261
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#260
See how to enable.	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#AnalyzingConfigFiles
	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#250
https://github.com/security-code-scan/security-code-scan/tree/vs2019/website	https://github.com/security-code-scan/security-code-scan/tree/vs2019/website
security-code-scan.github.io	https://security-code-scan.github.io
Readme	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io#readme-ov-file
Please reload this page	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
Activity	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/activity
Custom properties	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/custom-properties
7 stars	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/stargazers
0 watching	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/watchers
5 forks	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/forks
Report repository	https://patch-diff.githubusercontent.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Fsecurity-code-scan%2Fsecurity-code-scan.github.io&report=security-code-scan+%28user%29
Please reload this page	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io
JavaScript 61.9%	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/search?l=javascript
CSS 29.7%	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/search?l=css
HTML 8.4%	https://patch-diff.githubusercontent.com/security-code-scan/security-code-scan.github.io/search?l=html
	https://github.com
Terms	https://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacy	https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Security	https://github.com/security
Status	https://www.githubstatus.com/
Community	https://github.community/
Docs	https://docs.github.com/
Contact	https://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.