SPC020210: Do not add PageParserPaths to web.config |
SPC020210: Do not add PageParserPaths to web.config |
PageParserPaths can be used to enable inline code in ASPX pages which is not allowed.
TypeName: | DoNotAddPageParserPathToWebConfig |
CheckId: | SPC020210 |
Severity: | CriticalWarning |
Type: | AssemblyFileReference |
Do not add PageParserPaths to web.config via SPWebConfigModification to enable inline code in ASPX pages.
The rule can only check the appearance of 'SPWebConfigModification' and the string 'PageParserPaths' in the same class. This can lead to false positive results.
comments powered by Disqus
Copyright © 2013 RENCORE AB. All Rights Reserved
Disclaimer: The views and opinions expressed in this documentation and in SPCAF are those of the creators and do not necessarily reflect the opinions and recommendations of Microsoft or any member of Microsoft. All trademarks, service marks, collective marks, copyrights, registered names, and marks used or cited by this documentation are the property of their respective owners. SharePoint Code Analysis Framework, Version 4.5.2.7855, see www.spcaf.com for more information |