C#


ROSLYN.SECURITY.CA5366 : Use XmlReader for 'DataSet.ReadXml()' (C#)

See Roslyn-Detected C# Warning Classes for more information.

Summary

Processing XML from untrusted data may load dangerous external references, which should be restricted by using an XmlReader with a secure resolver or with DTD processing disabled.

This check corresponds to Roslyn rule CA5366. For full rule details, see the Microsoft website: CA5366.

Properties

Class Name Use XmlReader for 'DataSet.ReadXml()' (C#)
Significance security
Mnemonic ROSLYN.SECURITY.CA5366
Categories None
Availability Available for C# only.
Enabling Checks for this warning class are enabled by default. To disable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += discard class="Use XmlReader for 'DataSet.ReadXml()' (C#)"

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.