publicclassExampleController:Controller{privatestaticreadonlystring[]EFFECT_ALLOW_LIST={"SepiaEffect","BlackAndWhiteEffect","WaterColorEffect","OilPaintingEffect"};publicIActionResultApply(stringEffectName){if(!EFFECT_ALLOW_LIST.Contains(EffectName)){returnBadRequest("Invalid effect name. The effect is not allowed.");}varEffectInstance=Activator.CreateInstance(null,EffectName);objectEffectPlugin=EffectInstance.Unwrap();if(((IEffect)EffectPlugin).ApplyFilter()){returnOk();}else{returnProblem();}}}publicinterfaceIEffect{boolApplyFilter();}
シームレスな統合。 Datadog Code Security をお試しください
Datadog Code Security
このルールを試し、Datadog Code Security でコードを解析する
このルールの使用方法
1
2
rulesets:- csharp-security # Rules to enforce C# security.