Skip to content

Demo-Code-Complete Add DevSecOps-4837 demo page with intentional GHAS vulnerabilities #132

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Copilot wants to merge 2 commits into
base: main
Choose a base branch
from

Add DevSecOps-4837 demo page with GHAS features and intentional vulne…

c0630c6
Select commit
Loading
Failed to load commit list.
Draft

Demo-Code-Complete Add DevSecOps-4837 demo page with intentional GHAS vulnerabilities #132

Add DevSecOps-4837 demo page with GHAS features and intentional vulne…
c0630c6
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Feb 7, 2026 in 2s

16 new alerts including 7 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 7 high
  • 2 medium

Other Alerts:

  • 1 warning
  • 6 notes

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 37 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
Loading
.

Check failure on line 41 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
Loading
.
This log entry depends on a
user-provided value
Loading
.

Check failure on line 112 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Denial of Service from comparison of user input against expensive regex High

This regex operation with dangerous complexity depends on a
user-provided value
Loading
.

Check failure on line 113 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
Loading
.

Check failure on line 118 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
Loading
.

Check failure on line 127 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Insecure SQL connection High

Connection string
Loading
flows to this SQL connection and does not specify Encrypt=True.

Check failure on line 135 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Log entries created from user input High

This log entry depends on a
user-provided value
Loading
.

Check warning on line 99 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Useless assignment to local variable Warning

This assignment to
tempData
Loading
is useless, since its value is never read.

Check warning on line 113 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Exposure of private information Medium

Private data returned by
access to local variable testEmail
Loading
is written to an external location.
Private data returned by
access to local variable testEmail
Loading
is written to an external location.
Private data returned by
access to indexer
Loading
is written to an external location.

Check warning on line 118 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Exposure of private information Medium

Private data returned by
access to local variable testEmail
Loading
is written to an external location.
Private data returned by
access to local variable testEmail
Loading
is written to an external location.
Private data returned by
access to local variable testEmail
Loading
is written to an external location.
Private data returned by
access to indexer
Loading
is written to an external location.

Check notice on line 36 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient use of ContainsKey Note

Inefficient use of 'ContainsKey' and
indexer
Loading
.

Check notice on line 40 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient use of ContainsKey Note

Inefficient use of 'ContainsKey' and
indexer
Loading
.

Check notice on line 107 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient use of ContainsKey Note

Inefficient use of 'ContainsKey' and
indexer
Loading
.

Check notice on line 119 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 131 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Inefficient use of ContainsKey Note

Inefficient use of 'ContainsKey' and
indexer
Loading
.

Check notice on line 140 in src/webapp01/Pages/DevSecOps-4837.cshtml.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.