SharePoint Customization Analysis Framework (SPCAF)

Farm/Sandboxed Solutions

Do not update list of blocked extensions

Avoid setting 'AllowUnsafeUpdates' on SPWeb

Avoid setting 'AllowUnsafeUpdates' on SPSite

Do not call 'WindowsIdentity.Impersonate'

Do not set 'AllowEveryoneViewItems' for SPList to TRUE

Avoid usage of 'RunWithElevatedPrivileges'

Do not add PageParserPaths to web.config

Do not call 'HttpUtility.HtmlEncode'.

Do not nest calls to RunWithElevatedPrivileges

CAS Policy 'Maschine' with access='Administer' is not allowed

Policy Permission Impersonate not allowed

Do not define 'FileIOPermission' with 'Unrestricted=true'

Do not define 'RegistryPermission' with 'Unrestricted=true'

Do not define 'SecurityPermission' with 'Unrestricted=true'

Do not define 'EnvironmentPermission' with 'Unrestricted=true'

Do not define 'SmtpPermission' with 'Unrestricted=true'

Do not set 'AllowEveryoneViewItems' to TRUE in ListDefinition

Do not use inline code in ASPX pages

Add 'SharePoint:FormDigest' to ASPX page

Policy Permission Impersonate not allowed

The CAS Policy for Microsoft.SharePoint.Security.SharePointPermission with settings Impersonate=true is not allowed.

CheckId	SPC020603
TypeName	PolicyPermissionImpersonateNotAllowed
Severity	CriticalWarning
Type	PolicyItem

Remove setting 'Unrestricted=true' from the permission set.

Message Suppression

Copyright © 2009 - 2020 Rencore

SharePoint Customization Analysis Framework (SPCAF), 7.15.0.0

Disclaimer: The views and opinions expressed in this documentation and in SPCAF do not necessarily reflect the opinions and recommendations of Microsoft or any member of Microsoft. SPCAF and RENCORE are registered trademarks of Rencore. All other trademarks, service marks, collective marks, copyrights, registered names, and marks used or cited by this documentation are the property of their respective owners.