Exemplos de testcases.CWE129_Improper_Validation_of_Array_Index CWE129_Improper_Validation_of_Array_Index__QueryString_Web_array_read_check_min_74b.BadSink em C# (CSharp)

Exemplo n.º 1

        public override void Bad(HttpRequest req, HttpResponse resp)
        {
            int data;

            data = int.MinValue; /* initialize data in case id is not in query string */
            /* POTENTIAL FLAW: Parse id param out of the URL querystring (without using getParam) */
            {
                if (req.QueryString["id"] != null)
                {
                    try
                    {
                        data = int.Parse(req.QueryString["id"]);
                    }
                    catch (FormatException exceptNumberFormat)
                    {
                        IO.Logger.Log(NLog.LogLevel.Warn, exceptNumberFormat, "Number format exception reading id from query string");
                    }
                }
            }
            Dictionary <int, int> dataDictionary = new Dictionary <int, int>();

            dataDictionary.Add(0, data);
            dataDictionary.Add(1, data);
            dataDictionary.Add(2, data);
            CWE129_Improper_Validation_of_Array_Index__QueryString_Web_array_read_check_min_74b.BadSink(dataDictionary, req, resp);
        }