More configurable CSRF diagnostic proposal#127

Merged

JarLob merged 33 commits intosecurity-code-scan:vs2017from

kevin-montrose:vs2017-conditional-csrf-attribute

Aug 8, 2019

Commits on Jul 24, 2019

Change configuration of csrf protection to be considerably more flexible, combine Core and Mvc diagnostics using new flexibility, add conditional support, and add a test that demonstrates how to us…
kevin-montrose
committed
Support XSRF configurations that use an attribute to annotate actions, rather than (or in additon to) a base class.
kevin-montrose
committed

Commits on Jul 25, 2019

Commits on Jul 29, 2019

Commits on Jul 30, 2019

Commits on Jul 31, 2019

Commits on Aug 1, 2019

rename AttributeName to Name per https://github.com/security-code-scan/security-code-scan/pull/127#discussion_r309290308
kevin-montrose
committed

Commits on Aug 4, 2019

Refactor CSRF rules format
JarLob
committed