C# (CSharp) SecurityThreatDiagnostics.ChallengeUrlEncoding示例

示例#1

文件： Frends.Community.SecurityThreatDiagnostics.Tests.cs 项目： CommunityHiQ/Frends.Community.SecurityThreatDiagnostics

        public void GivenDoubleEncodedUrlInjectionInURIFormatWhenChallengingValidationThenSecurityThreatDiagnosticsMustRaiseExceptionDueToDoubleEncodedURI()
        {
            string unsecureUrl = "http://victim/cgi/%252E%252E%252F%252E%252E%252Fwinnt/system32/cmd.exe?/c+dir+c:\";";

            validation.Payload    = unsecureUrl;
            options.MaxIterations = 2;
            Assert.Throws <ApplicationException>(() => SecurityThreatDiagnostics.ChallengeUrlEncoding(validation, options, CancellationToken.None));
        }