Avoid using protocols without SSL
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。
ID: csharp-security/avoid-unencrypted-protocols
Language: C#
Severity: Warning
Category: Security
CWE: 319
Description
Using http:// or ftp:// instead of https:// or ftps:// leads to potential cleartext data transmission. Always use safe and secure connections.
Learn More
Non-Compliant Code Examples
using System.IO;
using System.Security.Cryptography;
class MyClass {
public void Encrypt(byte[] key, byte[] dataToEncrypt, MemoryStream target)
{
foobar(key, something, "http://domain.tld", plop);
}
}
using System.IO;
using System.Security.Cryptography;
class MyClass {
public void Encrypt(byte[] key, byte[] dataToEncrypt, MemoryStream target)
{
foo.bar(key, something, "http://domain.tld", plop);
}
}
using System.IO;
using System.Security.Cryptography;
class MyClass {
public void Encrypt(byte[] key, byte[] dataToEncrypt, MemoryStream target)
{
var httpUrl = "http://domain.tld";
var ftpUrl = "ftp://";
}
}
Compliant Code Examples
using System.IO;
using System.Security.Cryptography;
class MyClass {
public void Encrypt(byte[] key, byte[] dataToEncrypt, MemoryStream target)
{
var httpUrl = "https://domain.tld";
var ftpUrl = "ftps://";
}
}
Seamless integrations. Try Datadog Code Analysis
