Find XML external entity (XXE) processing

Proprietary

Finds DtdProcessing.Parse, ProhibitDtd = false, and non-null XmlResolver assignments on XmlDocument, XmlReaderSettings and XmlTextReader. Processing DTDs or resolving external entities from untrusted XML allows XXE attacks (file disclosure, SSRF, denial of service).

OpenRewrite.Recipes.CSharp.Security.FindXmlExternalEntityProcessing

mod run . --recipe=OpenRewrite.Recipes.CSharp.Security.FindXmlExternalEntityProcessing

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.