Metadata

ID: csharp-security/check-server-ssl-sertificates

Language: C#

Severity: Error

Category: Security

CWE: 295

Description

Never bypass certificate validation. Certificates should be correctly checked to avoid attacks from untrusted sources.

Learn More

• CWE-295: Improper Certificate Validation

Non-Compliant Code Examples

using System.Net;
using System.Net.Http;

class MyClass {
public static void connect()
    {
        ServicePointManager.ServerCertificateValidationCallback +=
            (sender, certificate, chain, errors) => {
                return true;
            };

    }
}