Avoid using protocols without SSL This product is not supported for your selected
Datadog site . (
).
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter .
TRY THIS RULE ID: csharp-security/avoid-unencrypted-protocols
Language: C#
Severity: Warning
Category: Security
CWE : 319
Description Using http://
or ftp://
instead of https://
or ftps://
leads to potential cleartext data transmission. Always use safe and secure connections.
Learn More Non-Compliant Code Examples using System.IO ;
using System.Security.Cryptography ;
class MyClass {
public void Encrypt ( byte [] key , byte [] dataToEncrypt , MemoryStream target )
{
foobar ( key , something , "http://domain.tld" , plop );
}
}
using System.IO ;
using System.Security.Cryptography ;
class MyClass {
public void Encrypt ( byte [] key , byte [] dataToEncrypt , MemoryStream target )
{
foo . bar ( key , something , "http://domain.tld" , plop );
}
}
using System.IO ;
using System.Security.Cryptography ;
class MyClass {
public void Encrypt ( byte [] key , byte [] dataToEncrypt , MemoryStream target )
{
var httpUrl = "http://domain.tld" ;
var ftpUrl = "ftp://" ;
}
}
Compliant Code Examples using System.IO ;
using System.Security.Cryptography ;
class MyClass {
public void Encrypt ( byte [] key , byte [] dataToEncrypt , MemoryStream target )
{
var httpUrl = "https://domain.tld" ;
var ftpUrl = "ftps://" ;
}
}
Seamless integrations. Try Datadog Code Security