Do not bypass certificates validation
This product is not supported for your selected
Datadog site. (
).
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
ID: csharp-security/check-server-ssl-sertificates
Language: C#
Severity: Error
Category: Security
CWE: 295
Related CWEs:
Description
Never bypass certificate validation. Certificates should be correctly checked to avoid attacks from untrusted sources.
Learn More
Non-Compliant Code Examples
using System.Net;
using System.Net.Http;
class MyClass {
public static void connect()
{
ServicePointManager.ServerCertificateValidationCallback +=
(sender, certificate, chain, errors) => {
return true;
};
}
}
Compliant Code Examples
using System.Net;
using System.Net.Http;
class MyClass {
public static void connect()
{
// Safe: properly validate certificates (default behavior)
var client = new HttpClient();
}
}
シームレスな統合。 Datadog Code Security をお試しください
