We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b2d5484 commit 938a996Copy full SHA for 938a996
csharp/ql/test/query-tests/Security Features/CWE-285/MissingAccessControl/MVCTests/ProfileController.cs
@@ -1,4 +1,5 @@
1
using Microsoft.AspNetCore.Mvc;
2
+using Microsoft.AspNetCore.Authorization;
3
4
public class ProfileController : Controller {
5
private void doThings() { }
@@ -18,4 +19,12 @@ public ActionResult Delete2(int id) {
18
19
doThings();
20
return View();
21
}
22
+
23
+ // GOOD: The Authorize attribute is used.
24
+ [Authorize]
25
+ public ActionResult Delete3(int id) {
26
+ doThings()
27
+ return View();
28
+ }
29
30
0 commit comments