Fix error security transparent issue with method HandleExceptionImp (#934)

claudiamurialdo · web-flow · commit 07675defa515 · 2024-01-17T14:03:46.000-03:00
diff --git a/dotnet/src/dotnetframework/GxClasses/Helpers/CsrfHelper.cs b/dotnet/src/dotnetframework/GxClasses/Helpers/CsrfHelper.cs
@@ -12,6 +12,7 @@ namespace GeneXus.Http
 {
 	internal class CSRFHelper
 	{
+		[SecuritySafeCritical]
 		internal static bool HandleException(Exception e, HttpContext httpContext)
 		{
 			if (RestAPIHelpers.ValidateCsrfToken())
@@ -20,6 +21,7 @@ internal static bool HandleException(Exception e, HttpContext httpContext)
 			}
 			return false;
 		}
+		[SecuritySafeCritical]
 		private static bool HandleExceptionImp(Exception e, HttpContext httpContext)
 		{
 			if (e is HttpAntiForgeryException)

Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,7 @@ namespace GeneXus.Http`
`12`	`12`	`{`
`13`	`13`	`internal class CSRFHelper`
`14`	`14`	`{`
	`15`	`+ [SecuritySafeCritical]`
`15`	`16`	`internal static bool HandleException(Exception e, HttpContext httpContext)`
`16`	`17`	`{`
`17`	`18`	`if (RestAPIHelpers.ValidateCsrfToken())`
`@@ -20,6 +21,7 @@ internal static bool HandleException(Exception e, HttpContext httpContext)`
`20`	`21`	`}`
`21`	`22`	`return false;`
`22`	`23`	`}`
	`24`	`+ [SecuritySafeCritical]`
`23`	`25`	`private static bool HandleExceptionImp(Exception e, HttpContext httpContext)`
`24`	`26`	`{`
`25`	`27`	`if (e is HttpAntiForgeryException)`