Fix S4507 FP: relax env.IsDevelopment();
sanitizer
#5032
Labels
Area: C#
C# rules related issues.
Area: Security
Related to Vulnerability and Security Hotspot rules
Type: False Positive
Rule IS triggered when it shouldn't be.
Milestone
S4507
Currently the following code will raise an issue:
This is a minor security hotspot, so it's not worth investing in a complex dataflow capability.
We should reduce the level of FPs by checking if
env.IsDevelopment()
is invoked in the same method/class and not raise issues in that case.Conversation: https://community.sonarsource.com/t/make-sure-this-debug-feature-is-deactivated-before-delivering-the-code-in-production/42336/4 (see internal as well)
The text was updated successfully, but these errors were encountered: