Veracode throws "technology-related login validation problems (CWE ID 100)" for a public row property in C #.
These are the formats that I have already tried, and they all give the same drawback.
Option: 1
public string MyProperty { get; set; }
Option: 2
private string _myProperty;
public string MyProperty
{
get
{
return _myProperty;
}
set
{
_myProperty = value;
}
}
Option: 3
private string _myProperty;
public string MyProperty
{
get
{
return _myProperty ?? string.Empty;
}
set
{
_myProperty = value;
}
}
Can someone say why?
source
share