Merge pull request #2735 from mavasani/UpdateDocumentationFiles

Update analyzer documentation files checked into the repo
dotnet · Aug 1, 2019 · 558ca61 · 558ca61
2 parents 280700e + f54660f
commit 558ca61
Show file tree

Hide file tree

Showing 14 changed files with 223 additions and 142 deletions.
diff --git a/PostReleaseActivities.md b/PostReleaseActivities.md
@@ -14,8 +14,9 @@ Please follow the below steps after publishing analyzer NuGet packages from this
    4. Update `eng\Versions.props`:
       1. Bump up the `VersionPrefix`.
       2. Reset `PreReleaseVersionLabel` to `beta1`.
-      3. Update `MicrosoftCodeAnalysisFXCopAnalyersVersion` to the latest released package version. Build the repo by invoking `Build.cmd` and fix/suppress any new CA diagnostics, as appropriate.
-   5. Create and submit a PR with the above changes.
+      3. Update `MicrosoftCodeAnalysisFXCopAnalyersVersion` to the latest released package version.
+   5. Build the repo by invoking `eng\common\CIBuild.cmd` and fix/suppress any new CA diagnostics, as appropriate. This should also update the analyzer documentation files in the repo to use the new version prefix.
+   6. Create and submit a PR with the above changes.
 
 Steps to generate Release Notes
 =================================================================

diff --git a/src/MetaCompilation.Analyzers/MetaCompilation.Analyzers.sarif b/src/MetaCompilation.Analyzers/MetaCompilation.Analyzers.sarif
@@ -5,7 +5,7 @@
     {
       "tool": {
         "name": "MetaCompilation.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {

diff --git a/src/Microsoft.CodeAnalysis.Analyzers/Microsoft.CodeAnalysis.Analyzers.sarif b/src/Microsoft.CodeAnalysis.Analyzers/Microsoft.CodeAnalysis.Analyzers.sarif
@@ -5,7 +5,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -299,7 +299,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.CSharp.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -479,7 +479,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.VisualBasic.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {

diff --git a/...Microsoft.CodeAnalysis.BannedApiAnalyzers/Microsoft.CodeAnalysis.BannedApiAnalyzers.sarif b/...Microsoft.CodeAnalysis.BannedApiAnalyzers/Microsoft.CodeAnalysis.BannedApiAnalyzers.sarif
@@ -5,7 +5,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.BannedApiAnalyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -14,7 +14,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.CSharp.BannedApiAnalyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -76,7 +76,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.VisualBasic.BannedApiAnalyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {

diff --git a/src/Microsoft.CodeAnalysis.FxCopAnalyzers/Microsoft.CodeAnalysis.FxCopAnalyzers.md b/src/Microsoft.CodeAnalysis.FxCopAnalyzers/Microsoft.CodeAnalysis.FxCopAnalyzers.md
diff --git a/src/Microsoft.CodeAnalysis.FxCopAnalyzers/Microsoft.CodeAnalysis.FxCopAnalyzers.sarif b/src/Microsoft.CodeAnalysis.FxCopAnalyzers/Microsoft.CodeAnalysis.FxCopAnalyzers.sarif
@@ -5,7 +5,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.VersionCheckAnalyzer",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -29,7 +29,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeQuality.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -1511,7 +1511,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeQuality.CSharp.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -1707,7 +1707,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeQuality.VisualBasic.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -1941,7 +1941,7 @@
     {
       "tool": {
         "name": "Microsoft.NetCore.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -2680,6 +2680,44 @@
             ]
           }
         },
+        "CA2329": {
+          "id": "CA2329",
+          "shortDescription": "Do not deserialize with JsonSerializer using an insecure configuration",
+          "fullDescription": "When deserializing untrusted input, allowing arbitrary types to be deserialized is insecure. When using deserializing JsonSerializer, use TypeNameHandling.None, or for values other than None, restrict deserialized types with a SerializationBinder.",
+          "defaultLevel": "warning",
+          "properties": {
+            "category": "Security",
+            "isEnabledByDefault": false,
+            "typeName": "DoNotUseInsecureDeserializerJsonNetWithoutBinder",
+            "languages": [
+              "C#",
+              "Visual Basic"
+            ],
+            "tags": [
+              "Dataflow",
+              "Telemetry"
+            ]
+          }
+        },
+        "CA2330": {
+          "id": "CA2330",
+          "shortDescription": "Ensure that JsonSerializer has a secure configuration when deserializing",
+          "fullDescription": "When deserializing untrusted input, allowing arbitrary types to be deserialized is insecure. When using deserializing JsonSerializer, use TypeNameHandling.None, or for values other than None, restrict deserialized types with a SerializationBinder.",
+          "defaultLevel": "warning",
+          "properties": {
+            "category": "Security",
+            "isEnabledByDefault": false,
+            "typeName": "DoNotUseInsecureDeserializerJsonNetWithoutBinder",
+            "languages": [
+              "C#",
+              "Visual Basic"
+            ],
+            "tags": [
+              "Dataflow",
+              "Telemetry"
+            ]
+          }
+        },
         "CA3001": {
           "id": "CA3001",
           "shortDescription": "Review code for SQL injection vulnerabilities",
@@ -3543,7 +3581,7 @@
     {
       "tool": {
         "name": "Microsoft.NetCore.CSharp.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -3678,7 +3716,7 @@
     {
       "tool": {
         "name": "Microsoft.NetCore.VisualBasic.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -3813,7 +3851,7 @@
     {
       "tool": {
         "name": "Microsoft.NetFramework.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -3896,7 +3934,7 @@
     {
       "tool": {
         "name": "Microsoft.NetFramework.CSharp.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -3941,7 +3979,7 @@
     {
       "tool": {
         "name": "Microsoft.NetFramework.VisualBasic.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {

diff --git a/...osoft.CodeAnalysis.VersionCheckAnalyzer/Microsoft.CodeAnalysis.VersionCheckAnalyzer.sarif b/...osoft.CodeAnalysis.VersionCheckAnalyzer/Microsoft.CodeAnalysis.VersionCheckAnalyzer.sarif
@@ -5,7 +5,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeAnalysis.VersionCheckAnalyzer",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {

diff --git a/src/Microsoft.CodeQuality.Analyzers/Microsoft.CodeQuality.Analyzers.sarif b/src/Microsoft.CodeQuality.Analyzers/Microsoft.CodeQuality.Analyzers.sarif
@@ -5,7 +5,7 @@
     {
       "tool": {
         "name": "Humanizer",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -14,7 +14,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeQuality.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -1496,7 +1496,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeQuality.CSharp.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {
@@ -1692,7 +1692,7 @@
     {
       "tool": {
         "name": "Microsoft.CodeQuality.VisualBasic.Analyzers",
-        "version": "2.9.4",
+        "version": "2.9.5",
         "language": "en-US"
       },
       "rules": {