Skip to content

Conversation

@hamzamahmood
Copy link
Collaborator

What

  • Removed ToString() overrides from HttpContext, HttpRequest, and HttpResponse to prevent exposure of sensitive information.
  • Bump package System.Net.Http.Json in test project due to reported vulnerability

Why

ToString() overrides in HTTP-related classes (e.g., HttpContext, HttpRequest, HttpResponse) risk exposing sensitive information.

Closes #97

Type of change

Select multiple if applicable.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause a breaking change)
  • Tests (adds or updates tests)
  • Documentation (adds or updates documentation)
  • Refactor (style improvements, performance improvements, code refactoring)
  • Revert (reverts a commit)
  • CI/Build (adds or updates a script, change in external dependencies)

- Removed ToString() overrides from HttpContext, HttpRequest, and HttpResponse to prevent exposure of sensitive information.
- Bump package System.Net.Http.Json in test project due to reported vulnerability

Closes #97
@hamzamahmood hamzamahmood added the bug Something isn't working label Dec 17, 2024
@hamzamahmood hamzamahmood self-assigned this Dec 17, 2024
@sonarqubecloud
Copy link

@hamzamahmood hamzamahmood merged commit 1814b1c into main Dec 18, 2024
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Prevent Sensitive Information in ToString() Overrides of HTTP Classes

3 participants