
ESoby214016 (Community Member) asked a question.
We have the following resource file in an ASP.NET core backend application :
now I have an auto generated file which looks up this value from this stored resource file with the following code :
/// <summary>
/// Looks up a localized string similar to Electronic Signature API GetOverallPackageSigningStatus validation error: {0}.
/// </summary>
public static string GetOverallPackageSigningStatus_Validation {
get {
return ResourceManager.GetString("GetOverallPackageSigningStatus.Validation", resourceCulture);
}
}
Now for this code, Veracode is flagging a vulnerability issue of code CWE 1174. All the resource keys are flagged the same with CWE 1174. We are seeing this for the first time, and this is on a resource file, its not possible to Data Annotate an autogenerated file, also this is not a Model class accepts a request. Why is this getting flagged?
.png)
Hi @ESoby214016 (Community Member),
Please send an email to support@veracode.com with these details, and well as a link to the scan that starts with "https://analysiscenter.veracode.com/". Then one of our engineers will look into it.
Many thanks,
Duncan