The C# analyzer detects 4 additional security problems related to File System Access Control

Hello C# developers,

Our C# analyzer was upgraded to detect 4 additional security problems:

  • S2612: Setting loose file permissions is security-sensitive
  • S5445: Insecure temporary file creation methods should not be used
  • S5443: Using publicly writable directories is security-sensitive
  • S5693: Allowing requests with excessive content length is security-sensitive

This is available now on SonarCloud and will come with SonarQube 8.8.

Alex

2 Likes