Code analysis tools for .NET
Questions tagged [cat.net]
8 questions
16
votes
6 answers
What’s the status of CAT.NET?
I’m trying to find Microsoft CAT.NET for VS2010 and it looks like there was a beta of their 2.0 version but every link to it in Microsoft Connect is now dead. This is the most recent reference I could find:…
Troy Hunt
- 20,345
- 13
- 96
- 151
3
votes
1 answer
CAT.Net 2.0 download
Does anyone know where I can find a downloadable copy of CAT.Net 2.0 (beta or not)? I have been lurking a lot, but I can only find broken links to MS Connect site.
Please help!
HiperiX
- 395
- 5
- 19
2
votes
2 answers
CAT.NET "Sanitize the file path prior to passing it to file system routines" message
I'm analyzing my code (C#, desktop application) with CAT.NET Code Analysis and getting "Sanitize the file path prior to passing it to file system routines" message when dealing with file names.
What I don't understand is that to ensure the file name…
Arseni Mourzenko
- 50,338
- 35
- 112
- 199
1
vote
1 answer
Is there a way to get CAT.NET rules in FxCop 10.0
FxCop does not cover many vulnerabilities like XSS, SQL injection etc.
These vulnerabilities were taken care of by CAT.NET earlier.
CAT.NET is compatible with FxCop 1.35 but not FxCop 10.0.
Is there any way I can get those rules in FxCop 10.0??
PS:…
Soumya Das
- 21
- 2
1
vote
2 answers
Alternatives to CAT.NET for website security analysis
I'm looking for an alternative tool to CAT.NET for performing static security scans on .NET code. Currently the CAT.NET tooling/development is at a somewhat fragile stage and doesn't offer the reliability that I'm looking for.
Are there any…
Gavin Miller
- 43,168
- 21
- 122
- 188
0
votes
3 answers
CAT.NET: vulnerability or false positive?
2nd in an occasional series:
Here's the first one
Is CAT.NET correct that the following is a genuine vulnerability in ASP.NET or is it a false positive?
var myInt =…
Rick Putnam
- 546
- 1
- 6
- 20
0
votes
1 answer
CAT.NET : ASP.net cross-site redirection vulnerability
CAT.NET says there is a cross-site redirection vulnerability in my website.
It says below code is problematic and can cause redirection attack.
this.Response.Redirect(this.Page.Request.Url.ToString());
I believe redirection attack occurs when a…
subs
- 2,189
- 12
- 35
- 59
-1
votes
5 answers
Static Code Analysis Tools -
How Many of you use static code analysis tools during development and what is the amount of false positives you experience with the tool you use? This is for a research.
Adithya
- 241
- 3
- 16