Find disabled TLS certificate validation

Proprietary

Finds certificate validation callbacks (lambdas and methods taking SslPolicyErrors) that always return true, and uses of HttpClientHandler.DangerousAcceptAnyServerCertificateValidator. Accepting any server certificate disables TLS authentication.

OpenRewrite.Recipes.CSharp.Security.FindDisabledCertificateValidation

mod run . --recipe=OpenRewrite.Recipes.CSharp.Security.FindDisabledCertificateValidation

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.