Merge pull request #327 from flcdrg/fix-security-warnings

Fix security warnings
flcdrg · Jan 8, 2022 · 24462c9 · 24462c9
2 parents 822dbc6 + 525880e
commit 24462c9
Show file tree

Hide file tree

Showing 9 changed files with 29 additions and 689 deletions.
diff --git a/Tests/ClassLibrary1/packages.lock.json b/Tests/ClassLibrary1/packages.lock.json
diff --git a/Tests/ClassLibrary2/packages.lock.json b/Tests/ClassLibrary2/packages.lock.json
diff --git a/Tests/ConsoleApp/packages.lock.json b/Tests/ConsoleApp/packages.lock.json
diff --git a/Tests/Directory.Build.props b/Tests/Directory.Build.props
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="15.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <ItemGroup>
+    <PackageReference Remove="Nerdbank.GitVersioning">
+    </PackageReference>
+  </ItemGroup>
+
+  <PropertyGroup>
+    <RestorePackagesWithLockFile>true</RestorePackagesWithLockFile>
+  </PropertyGroup>
+</Project>
diff --git a/Tests/WebApp/Views/Web.config b/Tests/WebApp/Views/Web.config
@@ -31,6 +31,11 @@
       <remove name="BlockViewHandler"/>
       <add name="BlockViewHandler" path="*" verb="*" preCondition="integratedMode" type="System.Web.HttpNotFoundHandler" />
     </handlers>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="SAMEORIGIN" />
+      </customHeaders>
+    </httpProtocol>
   </system.webServer>
 
   <system.web>

diff --git a/Tests/WebApp/Web.config b/Tests/WebApp/Web.config
@@ -19,13 +19,18 @@
   </appSettings>
   <system.web>
     <authentication mode="None" />
-    <compilation debug="true" targetFramework="4.6.1" />
+    <compilation targetFramework="4.6.1" />
     <httpRuntime targetFramework="4.6.1" />
   </system.web>
   <system.webServer>
     <modules>
       <remove name="FormsAuthentication" />
     </modules>
+    <httpProtocol>
+      <customHeaders>
+        <add name="X-Frame-Options" value="SAMEORIGIN" />
+      </customHeaders>
+    </httpProtocol>
   </system.webServer>
   <runtime>
     <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">

diff --git a/Tests/WebApp/packages.lock.json b/Tests/WebApp/packages.lock.json
@@ -1,7 +1,7 @@
 {
   "version": 1,
   "dependencies": {
-    "Any,Version=v0.0": {
+    ".NETFramework,Version=v4.6.1": {
       "Antlr": {
         "type": "Direct",
         "requested": "[3.4.1.9004, 3.4.1.9004]",