Skip to content

Commit

Permalink
Merge pull request #350 from Lombiq/issue/OCC-218
Browse files Browse the repository at this point in the history
OCC-218: Exclude \"The filename, directory name, or volume label syntax is incorrect\" error during security testing.
  • Loading branch information
Piedone authored Feb 28, 2024
2 parents 94f57ee + 76ac871 commit 68d72b6
Showing 1 changed file with 2 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -238,6 +238,8 @@ public static Func<IWebApplicationInstance, Task> CreateAppLogAssertionForSecuri
// a directory. Presumably this is an attempt to access protected files using source path manipulation.
// This is handled by ASP.NET Core and there is nothing for us to worry about.
"System.IO.IOException: Not a directory",
"System.IO.IOException: The filename, directory name, or volume label syntax is incorrect",
"System.IO.DirectoryNotFoundException: Could not find a part of the path",
// This happens when a request's model contains a dictionary and a key is missing. While this can be a
// legitimate application error, during a security scan it's more likely the result of an incomplete
// artificially constructed request. So the means the ASP.NET Core model binding is working as intended.
Expand Down

0 comments on commit 68d72b6

Please sign in to comment.