Skip to content

MSBuild analyzer could (should?) check for props files as well #1948

@GeertvanHorrik

Description

@GeertvanHorrik

Is your feature request related to a problem? Please describe.

With the new msbuild stuff (core sdk project style), dependencies can also be put into .props and .targets files in the root of the solution.

Describe the solution you'd like

Please also scan the following files:

  • .props
  • .targets (e.g. Directory.build.targets)

I hope it's as easy as adding the extensions to this line:

https://github.com/jeremylong/DependencyCheck/blob/master/core/src/main/java/org/owasp/dependencycheck/analyzer/MSBuildProjectAnalyzer.java#L75

Describe alternatives you've considered

Additional context

Let me know if you need more info.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions