1- using System ;
21using System . Data . SqlClient ;
32
43namespace InsecureSQLConnection
@@ -35,21 +34,21 @@ public void StringInBuilderProperty()
3534 public void StringInInitializer ( )
3635 {
3736 string connectString = "Server=1.2.3.4;Database=Anything;UID=ab;Pwd=cd;Encrypt=false" ;
38- SqlConnectionStringBuilder conBuilder = new SqlConnectionStringBuilder ( connectString ) { Encrypt = true } ; // False Positive
37+ SqlConnectionStringBuilder conBuilder = new SqlConnectionStringBuilder ( connectString ) { Encrypt = true } ;
3938 }
40-
39+
4140
4241 public void TriggerThis ( )
4342 {
44- // BAD, Encrypt not specified (version dependent)
43+ // BAD, Encrypt not specified
4544 SqlConnection conn = new SqlConnection ( "Server=myServerName\\ myInstanceName;Database=myDataBase;User Id=myUsername;" ) ;
4645 }
4746
4847 void Test4 ( )
4948 {
5049 string connectString =
5150 "Server=1.2.3.4;Database=Anything;UID=ab;Pwd=cd" ;
52- // BAD, Encrypt not specified (version dependent)
51+ // BAD, Encrypt not specified
5352 SqlConnectionStringBuilder builder = new SqlConnectionStringBuilder ( connectString ) ;
5453 var conn = new SqlConnection ( builder . ConnectionString ) ;
5554 }
@@ -62,20 +61,5 @@ void Test5()
6261 SqlConnectionStringBuilder builder = new SqlConnectionStringBuilder ( connectString ) ;
6362 var conn = new SqlConnection ( builder . ConnectionString ) ;
6463 }
65-
66- void Test6 ( )
67- {
68- var conn = new SqlConnectionStringBuilder ( SetToTrueConnStr ) { Encrypt = false } ; // Bug - cs/insecure-sql-connection-initializer
69- }
70-
71- void Test72ndPhase ( bool encrypt )
72- {
73- var conn = new SqlConnectionStringBuilder ( SetToTrueConnStr ) { Encrypt = encrypt } ; // Bug - cs/insecure-sql-connection-initializer (sink)
74- }
75-
76- void Test7 ( )
77- {
78- Test72ndPhase ( false ) ; // Bug - cs/insecure-sql-connection-initializer (source)
79- }
8064 }
8165}
0 commit comments