C#


CSHARP.INSEC.EAR : Execution After Redirect (C#)

Summary

Code is executed after a redirect.

Properties

Class Name Execution After Redirect (C#)
Significance security
Mnemonic CSHARP.INSEC.EAR
Categories
CWE CWE:698 Execution After Redirect (EAR)
Availability Available for C# only.
Enabling Checks for this warning class are enabled by default. To disable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += discard class="Execution After Redirect (C#)"

Examples

using System;
using System.Web;

namespace Execution_After_Redirect{
    class Execution_After_Redirect {

        public override void MyRedirect(HttpRequest req, HttpResponse resp) {
            resp.Redirect("/myfolder"); // 'Execution After Redirect (C#)' warning issued here
            Console.WriteLine("doing some more things here after the redirect");
    }
}

Resolution

Avoid executing code after a redirect.

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.