C#


ROSLYN.SECURITY.CA5359 : Do Not Disable Certificate Validation (C#)

See Roslyn-Detected C# Warning Classes for more information.

Summary

A certificate can help authenticate the identity of the server. Clients should validate the server certificate to ensure requests are sent to the intended server. If the ServerCertificateValidationCallback always returns 'true', any certificate will pass validation.

This check corresponds to Roslyn rule CA5359. For full rule details, see the Microsoft website: CA5359.

Properties

Class Name Do Not Disable Certificate Validation (C#)
Significance security
Mnemonic ROSLYN.SECURITY.CA5359
Categories None
Availability Available for C# only.
Enabling Checks for this warning class are enabled by default. To disable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += discard class="Do Not Disable Certificate Validation (C#)"

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.