diff --git a/includes/untrusted-data-class-note.md b/includes/untrusted-data-class-note.md index 334a62cba7b..a893a59f2b4 100644 --- a/includes/untrusted-data-class-note.md +++ b/includes/untrusted-data-class-note.md @@ -1,2 +1,2 @@ > [!IMPORTANT] -> Calling methods from this class with untrusted data is a security risk. Call the methods from this class only with trusted data. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Calling methods from this class with untrusted data is a security risk. Call the methods from this class only with trusted data. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). diff --git a/includes/untrusted-data-instance-note.md b/includes/untrusted-data-instance-note.md index 95383087cd0..44ab7776a9c 100644 --- a/includes/untrusted-data-instance-note.md +++ b/includes/untrusted-data-instance-note.md @@ -1,2 +1,2 @@ > [!IMPORTANT] -> Using an instance of this object with untrusted data is a security risk. Use this object only with trusted data. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data is a security risk. Use this object only with trusted data. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). diff --git a/includes/untrusted-data-interface-note.md b/includes/untrusted-data-interface-note.md index 023792867a5..ceb5f5c5e76 100644 --- a/includes/untrusted-data-interface-note.md +++ b/includes/untrusted-data-interface-note.md @@ -1,2 +1,2 @@ > [!IMPORTANT] -> Calling methods from classes that implement this interface with untrusted data is a security risk. Call the methods from classes that implement this interface only with trusted data. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Calling methods from classes that implement this interface with untrusted data is a security risk. Call the methods from classes that implement this interface only with trusted data. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). diff --git a/includes/untrusted-data-method-note.md b/includes/untrusted-data-method-note.md index 70f76f0a463..34f155ddcff 100644 --- a/includes/untrusted-data-method-note.md +++ b/includes/untrusted-data-method-note.md @@ -1,2 +1,2 @@ > [!IMPORTANT] -> Calling this method with untrusted data is a security risk. Call this method only with trusted data. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Calling this method with untrusted data is a security risk. Call this method only with trusted data. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). diff --git a/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSink.xml b/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSink.xml index ff69bd8553a..58b5d8afb35 100644 --- a/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSink.xml +++ b/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSink.xml @@ -41,7 +41,7 @@ |`includeVersions`|Specifies whether the formatter will include versioning information. Values are `true` or `false`.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSinkProvider.xml b/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSinkProvider.xml index 92d43bb9ee6..7b90f454456 100644 --- a/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSinkProvider.xml +++ b/xml/System.Runtime.Remoting.Channels/BinaryClientFormatterSinkProvider.xml @@ -41,7 +41,7 @@ |`includeVersions`|Specifies whether the formatter will include versioning information. Values are `true` or `false`.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSink.xml b/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSink.xml index ff40061a47a..a1f38299cfc 100644 --- a/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSink.xml +++ b/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSink.xml @@ -39,7 +39,7 @@ |`typeFilterLevel`|A string value that specifies the level of automatic deserialization that a server channel attempts. Supported values are `Low` (the default) and `Full`. For details about deserialization levels, see [Automatic Deserialization in .NET Framework Remoting](https://learn.microsoft.com/previous-versions/dotnet/netframework-4.0/5dxse167(v=vs.100)).

This property is supported only by the .NET Framework version 1.1 on the following platforms: Windows 98, Windows NT 4.0, Windows Millennium Edition, Windows 2000, Windows XP Home Edition, Windows XP Professional, and Windows Server 2003 family.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSinkProvider.xml b/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSinkProvider.xml index 369a3f1bd7c..9b3e525db32 100644 --- a/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSinkProvider.xml +++ b/xml/System.Runtime.Remoting.Channels/BinaryServerFormatterSinkProvider.xml @@ -43,7 +43,7 @@ |`includeVersions`|Specifies whether the formatter will include versioning information. Values are `true` or `false`.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSink.xml b/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSink.xml index af4665496bd..2f5b78ee654 100644 --- a/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSink.xml +++ b/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSink.xml @@ -41,7 +41,7 @@ |`includeVersions`|Specifies whether the formatter will include versioning information. Values are `true` or `false`.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSinkProvider.xml b/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSinkProvider.xml index c1bbc8833d9..546e04521ee 100644 --- a/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSinkProvider.xml +++ b/xml/System.Runtime.Remoting.Channels/SoapClientFormatterSinkProvider.xml @@ -41,7 +41,7 @@ |`includeVersions`|Specifies whether the formatter will include versioning information. Values are `true` or `false`.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSink.xml b/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSink.xml index b8fed1a161e..98b6f4ddd87 100644 --- a/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSink.xml +++ b/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSink.xml @@ -37,7 +37,7 @@ |`typeFilterLevel`|A string value specifying the level of automatic deserialization a server channel attempts. Supported values are `Low` (the default) and `Full`. For details about deserialization levels, see [Automatic Deserialization in .NET Framework Remoting](https://learn.microsoft.com/previous-versions/dotnet/netframework-4.0/5dxse167(v=vs.100)).

This property is supported only by the .NET Framework version 1.1 on the following platforms: Windows 98, Windows NT 4.0, Windows Millennium Edition, Windows 2000, Windows XP Home Edition, Windows XP Professional, and Windows Server 2003 family.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSinkProvider.xml b/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSinkProvider.xml index 2aa31e9ec23..50a79343df9 100644 --- a/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSinkProvider.xml +++ b/xml/System.Runtime.Remoting.Channels/SoapServerFormatterSinkProvider.xml @@ -43,7 +43,7 @@ |`includeVersions`|Specifies whether the formatter will include versioning information. Values are `true` or `false`.| > [!IMPORTANT] -> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object with untrusted data or across an unsecure channel is a security risk. Use this object only with trusted data and across a secure channel. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System.Web.Script.Serialization/JavaScriptSerializer.xml b/xml/System.Web.Script.Serialization/JavaScriptSerializer.xml index 19fc16c589b..cfb65510c0b 100644 --- a/xml/System.Web.Script.Serialization/JavaScriptSerializer.xml +++ b/xml/System.Web.Script.Serialization/JavaScriptSerializer.xml @@ -145,7 +145,7 @@ To serialize an object, use the that is used by the asynchronous communication layer for invoking Web services from client script uses a special type resolver. This type resolver restricts the types that can be deserialized to those defined in the Web service's method signature, or the ones that have the applied. You cannot modify this built-in type resolver programmatically. > [!IMPORTANT] -> Using an instance of this object initialized with a custom type-resolver can present a security risk. Use this object only with trusted data. For more information, see [Validate All Inputs](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs). +> Using an instance of this object initialized with a custom type-resolver can present a security risk. Use this object only with trusted data. For more information, see [Validate All Inputs](https://top10proactive.owasp.org/archive/2024/the-top-10/c3-validate-input-and-handle-exceptions/). ]]> diff --git a/xml/System/EventHandler.xml b/xml/System/EventHandler.xml index a4c3f4b8d8a..c6aea3ef64b 100644 --- a/xml/System/EventHandler.xml +++ b/xml/System/EventHandler.xml @@ -78,32 +78,22 @@ and refers to the instance that raises the event. Its second parameter is derived from type and holds the event data. If the event does not generate event data, the second parameter is simply the value of the field. Otherwise, the second parameter is a type derived from and supplies any fields or properties needed to hold the event data. - The delegate is a predefined delegate that specifically represents an event handler method for an event that does not generate data. If your event does generate data, you must use the generic delegate class. + The delegate is a predefined delegate that specifically represents an event handler method for an event that does not generate data. If your event does generate data, you must use the generic delegate class. To associate the event with the method that will handle the event, add an instance of the delegate to the event. The event handler is called whenever the event occurs, unless you remove the delegate. For more information about event handler delegates, see [Handling and Raising Events](/dotnet/standard/events/). - - -## Examples - The following example shows an event named `ThresholdReached` that is associated with an delegate. The method assigned to the delegate is called in the `OnThresholdReached` method. - - :::code language="cpp" source="~/snippets/cpp/VS_Snippets_CLR/eventsoverview/cpp/programwithdata.cpp" id="Snippet6"::: - :::code language="csharp" source="~/snippets/csharp/System/EventArgs/Overview/programwithdata.cs" id="Snippet6"::: - :::code language="fsharp" source="~/snippets/fsharp/System/EventArgs/Overview/programwithdata.fs" id="Snippet6"::: - :::code language="vb" source="~/snippets/visualbasic/VS_Snippets_CLR/eventsoverview/vb/module1withdata.vb" id="Snippet6"::: - ]]> @@ -114,6 +104,5 @@ Events (Visual Basic) Events (C# Programming Guide) Events (F#) - Events and routed events overview (Windows store apps) diff --git a/xml/System/EventHandler`1.xml b/xml/System/EventHandler`1.xml index 73b5125d599..51e8da168ce 100644 --- a/xml/System/EventHandler`1.xml +++ b/xml/System/EventHandler`1.xml @@ -88,26 +88,25 @@ and refers to the instance that raises the event. Its second parameter is derived from type and holds the event data. If the event does not generate event data, the second parameter is simply the value of the field. Otherwise, the second parameter is a type derived from and supplies any fields or properties needed to hold the event data. - The delegate is a predefined delegate that represents an event handler method for an event that generates data. The advantage of using is that you do not need to code your own custom delegate if your event generates event data. You simply provide the type of the event data object as the generic parameter. + The delegate is a predefined delegate that represents an event handler method for an event that generates data. The advantage of using is that you don't need to code your own custom delegate if your event generates event data. You simply provide the type of the event data object as the generic parameter. To associate the event with the method that will handle the event, add an instance of the delegate to the event. The event handler is called whenever the event occurs, unless you remove the delegate. For more information about event handler delegates, see [Handling and Raising Events](/dotnet/standard/events/). - - ## Examples - The following example shows an event named `ThresholdReached`. The event is associated with an delegate. + +The following example shows an event named `ThresholdReached`. The event is associated with an delegate. :::code language="cpp" source="~/snippets/cpp/VS_Snippets_CLR/eventsoverview/cpp/programwithdata.cpp" id="Snippet6"::: :::code language="csharp" source="~/snippets/csharp/System/EventArgs/Overview/programwithdata.cs" id="Snippet6"::: @@ -125,6 +124,5 @@ Events (Visual Basic) Events (C# Programming Guide) Events (F#) - Events and routed events overview (Windows store apps) diff --git a/xml/ns-System.Data.SqlClient.xml b/xml/ns-System.Data.SqlClient.xml index 582e2cc0ac0..12af655f4bb 100644 --- a/xml/ns-System.Data.SqlClient.xml +++ b/xml/ns-System.Data.SqlClient.xml @@ -4,11 +4,15 @@ , you can fill a memory-resident that you can use to query and update the database. +## Remarks + +> [!NOTE] +> The APIs are deprecated. For new development, use the APIs. + +The .NET Data Provider for SQL Server describes a collection of classes used to access a SQL Server database in the managed space. Using the , you can fill a memory-resident that you can use to query and update the database. > [!NOTE] -> For conceptual information about using this namespace when programming with .NET, see [SQL Server and ADO.NET](/dotnet/framework/data/adonet/sql/). +> For conceptual information about using this namespace when programming with .NET, see [SQL Server and ADO.NET](/dotnet/framework/data/adonet/sql/). ]]>