Skip to content

Reject unsafe target framework metadata - #4335

Open
siegfriedpammer wants to merge 1 commit into
masterfrom
fix/target-framework-sanitization
Open

siegfriedpammer wants to merge 1 commit into
masterfrom
fix/target-framework-sanitization

Conversation

@siegfriedpammer

Copy link
Copy Markdown
Member

Validate target framework identifiers and profiles before writing them into exported project files. Malformed metadata can otherwise inject XML/project content into generated project files.

Finding: ANT-2026-CYSUXZNM

Verification: formatting and diff checks passed. Full local build/test execution is blocked by the missing Microsoft.Build.BackEnd.TaskParameter+TaskParameterTaskItem reference assembly in the local annotator cache.

Assisted-by: OpenCode:gpt-5.6-luna:OpenCode

Assisted-by: OpenCode:gpt-5.6-luna:OpenCode

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant