Our website uses cookies to enhance your browsing experience.
Accept
to the top
>
>
Posts: #Knowledge

Posts: # Knowledge

Vulnerabilities due to XML files processing: XXE in C# applications in theory and in practice
Sergey Vasiliev
How can simple XML files processing turn into a security weakness? How can a blog deployed on your machine cause a data leak? Today we'll find answers to these questions, learn what XXE is and how...
...
Design and evolution of constexpr in C++
Guest
constexpr is one of the magic keywords in modern C++. You can use it to create code, that is then executed before the compilation process ends. This is the absolute upper limit for...
...
Subscribe to the newsletter
Want to receive a monthly digest of the most interesting articles and news? Subscribe!
C++20 Ranges — Complete Guide
Guest
C++20 Ranges, also known as STL v2, effectively replaces existing STL algorithms and facilities. In this article, I will guide you through the changes that Ranges introduce, talk about Views...
...
Nov 26 2021
Virtual function calls in constructors and destructors (C++)
Andrey Karpov
In different programming languages, the behavior of virtual functions differs when it comes to constructors and destructors. Incorrect use of virtual functions is a classic mistake. Developers...
...
Oct 20 2021
What's new in C# 10: overview
Valentin Prokofiev
This article covers the new version of the C# language - C# 10. Compared to C# 9, C# 10 includes a short list of enhancements. Below we described the enhancements and added explanatory...
...
Sep 28 2021
CWE Top 25 2021. What is it, what is it for and how is it useful for static analysis?
Mikhail Gelvikh
For the first time PVS-Studio provided support for the CWE classification in the 6.21 release. It took place on January 15, 2018. Years have passed since then and we would like to tell you about...
...
Sep 23 2021
Creating Roslyn API-based static analyzer for C#
Valery Komarov
After you read this article, you'll have the knowledge to create your own static analyzer for C#. With the help of the analyzer, you can find potential errors and vulnerabilities in the source...
...
Sep 06 2021
Why do you need the MISRA Compliance report and how to generate one in PVS-Studio?
Nikolay Mironov
If you are strongly interested in MISRA and would like to understand whether your project meets one of the MISRA association's standards, there is a solution. Its name is MISRA Compliance...
...
Aug 30 2021
What's new in C# 9: overview
Konstantin Volohovsky
Although C# 9 came out over half a year ago, the community is still processing its immense list of changes and has yet to discover best practices for the new features. It's a great excuse to go...
...
XSS: attack, defense - and C# programming
Valery Komarov
XSS - or cross-site scripting - is one of the most common vulnerabilities in web applications. It has been on the OWASP Top 10 list (the list of the most critical security risks to web...
...
View more Pagination arrow previous
Showing: - of 157