CodeQL query to detect pages with validationRequest disabled

[cldrn]

Report

Request validation is a feature in ASP.NET that protects web applications against potentially malicious content in requests, specifically against cross-site scripting attacks.

This issue is still commonly found in custom ASP.NET applications. Vulnerabilities found in commercial products are normally marked as XSS:

• https://www.cvedetails.com/cve/CVE-2008-3842/
• https://docs.microsoft.com/en-us/previous-versions/aspnet/debza5t0(v=vs.100)?redirectedfrom=MSDN

CodeQL query PR: github/codeql#2358

[xcorail]

Overall Rating: Low
Paid