C#


ROSLYN.SECURITY.CA5371 : Use XmlReader for 'XmlSchema.Read()' (C#)

See Roslyn-Detected C# Warning Classes for more information.

Summary

Processing XML from untrusted data may load dangerous external references, which should be restricted by using an XmlReader with a secure resolver or with DTD processing disabled.

This check corresponds to Roslyn rule CA5371. For full rule details, see the Microsoft website: CA5371.

Properties

Class Name Use XmlReader for 'XmlSchema.Read()' (C#)
Significance security
Mnemonic ROSLYN.SECURITY.CA5371
Categories None
Availability Available for C# only.
Enabling Checks for this warning class are enabled by default. To disable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += discard class="Use XmlReader for 'XmlSchema.Read()' (C#)"

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.