Hello,
You are correct; the issues I cited are not security vulnerabilities. If it were a security vulnerability, we would expect ABP to intervene much earlier and more seriously. The examples I gave are issues marked as high risk related to maintenance and code quality. I was curious about ABP's policy on this matter.
Thanks.
Hello
Within the ABP framework, there is a lot of code that carries SonarQube risks. Some of these were created with the ABP Suite, while others date back to the project's inception. Do we need to make custom updates to these codes? Or will future updates include risk fixes for these codes as well? Especially for codes created with the suite!
I would like to know about your policies in this regard. I am attaching some examples that involve (maintable) high risk below.
DemoDbContext.cs High Parameter names should match base declaration and other partial definitions[csharpsquid:S927]
protected override void OnModelCreating(ModelBuilder builder)
DemoDbMigrationService.cs High Unread "private" fields should be removed[csharpsquid:S4487]
private readonly ICurrentTenant _currentTenant;
OpenIddictDataSeedContributor.cs High Cognitive Complexity of methods should not be too high[csharpsquid:S3776]
private async Task CreateApplicationAsync()
{
// refactor
}
CookiePolicy.cshtml.cs High Methods should not be empty [csharpsquid:S1186]
public void OnGet()
{
}
HostDashboard.js High Variables should be declared with "let" or "const"[javascript:S3504]
var $dateRangePicker = $('#DashboardFilterForm .date-range-picker');
Hello;
In a layered MVC project running on multiple nodes as a multi-instance on Kubernetes, is session management possible? I need to use it with the DynamicClaims setting set to false. When a user logs in, I want to store some data throughout the session. I could also do this on Redis. However, is there a built-in structure in ABP that is suitable for this environment?:
hi
Tiered - MVC project
Hi,
Actually, you can reproduce this error yourself. Open a page within an ABP application using two different browsers. Log in as admin on one browser and as user on the other. Open the page related to the user and leave it open. From the other browser, remove the permission for the relevant page from the user's role using the admin. Make a list request on the user's open page so you can see the error. How can we localize this error?
Hello
I emailed you the log.txt file.
hi
It appears when unauthorized access is made to a page.