contrib.csharp.best-practices.viewstatemac.viewstate-mac

profile photo of returntocorpreturntocorp
Author
unknown
Download Count*

The enableViewStateMac is disabled in configuration file.

Run Locally

Run in CI

Defintion

rules:
  - id: viewstate-mac
    patterns:
      - pattern: enableViewStateMac="false"
    message: The enableViewStateMac is disabled in configuration file.
    languages:
      - generic
    severity: ERROR
    metadata:
      technology:
        - asp.net
        - csharp
      category: best-practice
      owasp: A06:2017 - Security Misconfiguration
      cwe: "CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework"
      license: Commons Clause License Condition v1.0[LGPL-2.1-only]