Vulnerabilities produce enormous reputational and financial risks. That’s why many companies are fascinated by security and desire to build a secure development life cycle (SSDLC). So, today we’re going to discuss SAST — one of the SSDLC components. SAST (static application security testing) is used to search for security defects…

Some believe that experienced developers do not make silly errors. Comparison errors? Dereferencing null references? Bet you think: “No, it’s definitely not about me…” ;) By the way, what about errors with sorting? As the title suggests, there are some nuances. OrderBy(…).OrderBy(…) Let me give you an example to describe the…

You decided to make an app that works with SVG. Encouraged by the enthusiasm, you collected libraries and successfully made the application. But suddenly you find that the app is sending strange network requests. And data is leaking from the host-machine. How so? In today’s world, you can have a…

How can simple XML files processing turn into a security weakness? How can a blog deployed on your machine cause a data leak? Today we’ll find answers to these questions, learn what XXE is and how it looks like. Before we begin, note that there are several types of vulnerabilities…

Let’s take a look at the list of information sources that can be useful for the C# / .NET developers. Our list includes blogs, repositories with source code, standards and accounts of developers who covers the deep aspects of the C# and .NET. Blogs .NET Blog Link: https://devblogs.microsoft.com/dotnet/ It’s an official blog…

2021 is coming to an end, which means it’s time to sum up the year! Today we’ll tell you about the new features we added to PVS-Studio in the past year. Buckle up and let’s go! We’ll start with going back to the past. You didn’t expect that, right? Still…

The .NET 6 turned out to be much-awaited and major release. If you write for .NET, you could hardly miss such an event. We also couldn’t pass by the new version of this platform. We decided to check what interesting things we can find in the sources of .NET libraries. Details about the check …

Today, we discuss C# code quality and a variety of errors by the example of CMS DotNetNuke. We’re going to dig into its source code. You’re going to need a cup of coffee… DotNetNuke

People often see work in support as something negative. Today we’ll look at it from a different perspective. This article is about a real communication of 100+ messages, exceptions, the analysis that didn’t complete in three days… Actually, bug reports are great If a bug report is adequately handled from…