ESoby214016 (Community Member) asked a question.

Veracode is flagging resource files as an error with CWE 1174, why is this getting flagged?

We have the following resource file in an ASP.NET core backend application :

imagenow I have an auto generated file which looks up this value from this stored resource file with the following code :

/// <summary>

///  Looks up a localized string similar to Electronic Signature API GetOverallPackageSigningStatus validation error: {0}.

/// </summary>

public static string GetOverallPackageSigningStatus_Validation {

  get {

    return ResourceManager.GetString("GetOverallPackageSigningStatus.Validation", resourceCulture);

  }

}

 

Now for this code, Veracode is flagging a vulnerability issue of code CWE 1174. All the resource keys are flagged the same with CWE 1174. We are seeing this for the first time, and this is on a resource file, its not possible to Data Annotate an autogenerated file, also this is not a Model class accepts a request. Why is this getting flagged?

 

 


Topics (7)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.