Skip to content

WFO1000 Analyzer: False positives on properties of interfaces derived from IComponent #13208

@KlausLoeffelmann

Description

@KlausLoeffelmann

The WFO1000 security analyzer flags public and protected properties of interfaces derived from IComponent which are not System.Component.IComponent, which are not used for serialization. This results in false positives, for example in BlazorHybrid scenarios in WinForms.

Example:

public interface IComponent
{
    void NothingTodoWithComponentModelMethod();
}

public interface ICustomInterface : IComponent 
{
    Rectangle Bounds { get; set; }
    Size Size { get; protected set; }
}

Replaces a part of the Bug of #12476.

Metadata

Metadata

Labels

area-Analyzers/CodeFixesA Roslyn Analyzer is either needed for the context, needs to be scope extended or fixed.

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions