Security Fix: JSON Deserialization Protection & Code Improvements#66
Open
yuseok-kim-edushare wants to merge 30 commits intogeral2:masterfrom
Open
Security Fix: JSON Deserialization Protection & Code Improvements#66yuseok-kim-edushare wants to merge 30 commits intogeral2:masterfrom
yuseok-kim-edushare wants to merge 30 commits intogeral2:masterfrom
Conversation
To modernize about web request codes
Tls and Ssl3 is not safe at now
by static JsonSerializerSetting
with .NET native api, add validation check proper input value
.net 4 is too old version and we can consider if SQL2016 supported windows server 2012 or above win 2012 can run net 48
just after build, we only need DDL sql and dll file from this project
Now we only register 1 dll file with single query
…th visual studio solution explorer
Owner
|
Hello @yuseok-kim-edushare, Thanks a ton for this PR! 🙌 Really appreciate the time and effort you put into this — everything looks solid. Great job on the build improvements! I'll go ahead and review/test it shortly. Thanks again for contributing! |
Author
|
I Fix sqlproj |
Cause of IL-repack using CLR assembly reference list changed then need to drop and create is needed
Author
|
I Add A script to re-install CLR then i create SQL Script for re-install this |
Add some dependency dll removing for cleanner option
yuseok-kim-edushare
force-pushed
the
dev/yuseok
branch
from
d2aa7e7 to
d58abf0
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
this pr also can close #65 and close #64 + close #61 by db9279b
Overview
This PR implements critical security fixes and code improvements to enhance both security and performance of the SQL-APIConsumer component.
Key Changes
Security Impact
The JSON deserialization depth limit prevents potential Denial of Service attacks through maliciously crafted deep-nested JSON payloads that could cause:
Cleanup