Skip to content

Implement DevSecOps5 page with latest GHAS features and security demos

9e3878b
Select commit
Loading
Failed to load commit list.
Draft

Implement DevSecOps5 page with latest GHAS features and security vulnerability demos #100

Implement DevSecOps5 page with latest GHAS features and security demos
9e3878b
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Aug 21, 2025 in 2s

12 new alerts including 5 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 5 high

Other Alerts:

  • 1 warning
  • 6 notes

See annotations below for details.

View all branch alerts.

Annotations

Check notice on line 40 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient use of ContainsKey Note

Inefficient use of 'ContainsKey' and
indexer
.

Check failure on line 43 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
.

Check notice on line 64 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check failure on line 63 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
.

Check warning on line 89 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Useless assignment to local variable Warning

This assignment to
deserializedData
is useless, since its value is never read.

Check notice on line 96 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 116 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient use of ContainsKey Note

Inefficient use of 'ContainsKey' and
indexer
.

Check failure on line 120 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Denial of Service from comparison of user input against expensive regex High

This regex operation with dangerous complexity depends on a
user-provided value
.

Check failure on line 121 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
.

Check notice on line 127 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check failure on line 126 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
.

Check notice on line 175 in src/webapp01/Pages/DevSecOps5.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.