Skip to content

Commit

Permalink
fixed two typos in DotNet cheatsheet
Browse files Browse the repository at this point in the history
  • Loading branch information
OngDevLab committed Aug 7, 2024
1 parent 8e64d0b commit e55f0df
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions cheatsheets/DotNet_Security_Cheat_Sheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -817,7 +817,7 @@ What logs to collect and more information about logging can be found in the [Log

.NET Core comes with a LoggerFactory, which is in Microsoft.Extensions.Logging. More information about ILogger can be found [here](https://docs.microsoft.com/en-us/dotnet/api/microsoft.extensions.logging.ilogger).
How to log all errors from the `Startup.cs`, so that anytime an error is thrown it will be logged:
Here's how to log all errors from the `Startup.cs`, so that anytime an error is thrown it will be logged:

``` csharp
public void Configure(IApplicationBuilder app, IHostingEnvironment env)
Expand Down Expand Up @@ -965,7 +965,7 @@ Malicious users are able to use objects like cookies to insert malicious informa
DO: Prevent Deserialization of Domain Objects

DO: Run the Deserialization Code with Limited Access Permissions
If a deserialized hostile object tries to initiate a system processes or access a resource within the server or the host's OS, it will be denied access and a permission flag will be raised so that a system administrator is made aware of any anomalous activity on the server.
If a deserialized hostile object tries to initiate a system process or access a resource within the server or the host's OS, it will be denied access and a permission flag will be raised so that a system administrator is made aware of any anomalous activity on the server.

More information about Insecure Deserialization can be found in the [Deserialization Cheat Sheet](Deserialization_Cheat_Sheet.md#net-csharp).

Expand Down

0 comments on commit e55f0df

Please sign in to comment.