|
3 | 3 | <Title>Umbraco CMS - Persistence - SQL Server</Title>
|
4 | 4 | <Description>Adds support for SQL Server to Umbraco CMS.</Description>
|
5 | 5 | </PropertyGroup>
|
| 6 | + |
6 | 7 | <PropertyGroup>
|
7 |
| - <!-- TODO: [SA1405] Debug assret message text, [SA1121] resolve hiding inherited members, [SA1117] remove |
8 |
| - async or make method synchronous, [IDE1006] fix naming rule violation, [CS0618] handle member |
9 |
| - obsolete appropriately, [IDE0270] simplify null check, [IDE0057] simplify substring, [IDE0054] |
10 |
| - use compound assignment, [CSO618] use NVARCARMAX, [IDE0048] add parenthesis for clarity, |
11 |
| - [CS1574] resolve ML comment cref attribute, and remove these overrides --> |
12 |
| - <WarningsNotAsErrors> |
13 |
| - SA1405,SA1121,SA1117,SA1116,IDE1006,CS0618,IDE0270,IDE0057,IDE0054,CSO618,IDE0048, |
14 |
| - CS1574 |
15 |
| - </WarningsNotAsErrors> |
| 8 | + <!-- |
| 9 | + TODO: Fix and remove overrides: |
| 10 | + [SA1405] Debug assret message text |
| 11 | + [SA1121] resolve hiding inherited members |
| 12 | + [SA1117] remove async or make method synchronous |
| 13 | + [IDE1006] fix naming rule violation |
| 14 | + [CS0618] handle member obsolete appropriately |
| 15 | + [IDE0270] simplify null check |
| 16 | + [IDE0057] simplify substring |
| 17 | + [IDE0054] use compound assignment |
| 18 | + [CSO618] use NVARCARMAX |
| 19 | + [IDE0048] add parenthesis for clarity |
| 20 | + [CS1574] resolve ML comment cref attribute |
| 21 | + --> |
| 22 | + <WarningsNotAsErrors>$(WarningsNotAsErrors),SA1405,SA1121,SA1117,IDE1006,CS0618,IDE0270,IDE0057,IDE0054,CSO618,IDE0048,CS1574</WarningsNotAsErrors> |
16 | 23 | </PropertyGroup>
|
| 24 | + |
| 25 | + <ItemGroup> |
| 26 | + <PackageReference Include="NPoco.SqlServer" /> |
| 27 | + </ItemGroup> |
| 28 | + |
17 | 29 | <ItemGroup>
|
18 | 30 | <!-- Take top-level depedendency on Azure.Identity, because NPoco.SqlServer depends on a vulnerable version -->
|
19 | 31 | <PackageReference Include="Azure.Identity" />
|
20 |
| - <PackageReference Include="NPoco.SqlServer" /> |
21 | 32 | <!-- Take top-level depedendency on System.Runtime.Caching, because Microsoft.EntityFrameworkCore.SqlServer depends on a vulnerable version -->
|
22 | 33 | <PackageReference Include="System.Runtime.Caching" />
|
23 |
| - <!-- Both OpenIddict.AspNetCore, Npoco.SqlServer and Microsoft.EntityFrameworkCore.SqlServer bring in a vulnerable version of Microsoft.IdentityModel.JsonWebTokens --> |
24 |
| - <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens"/> |
25 |
| - |
26 |
| - <!-- Both Azure.Identity, Microsoft.EntityFrameworkCore.SqlServer, Dazinator.Extensions.FileProviders bring in legacy versions of System.Text.Encodings.Web --> |
27 |
| - <PackageReference Include="System.Text.Encodings.Web"/> |
28 |
| - |
29 |
| - <!-- NPoco.SqlServer bring in vulnerable version of Microsoft.Data.SqlClient --> |
| 34 | + <!-- Take top-level depedendency on Microsoft.IdentityModel.JsonWebTokens, because OpenIddict.AspNetCore, Npoco.SqlServer and Microsoft.EntityFrameworkCore.SqlServer depends on a vulnerable version --> |
| 35 | + <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" /> |
| 36 | + <!-- Take top-level depedendency on System.Text.Encodings.Web, because Azure.Identity, Microsoft.EntityFrameworkCore.SqlServer, Dazinator.Extensions.FileProviders depends on a vulnerable version --> |
| 37 | + <PackageReference Include="System.Text.Encodings.Web" /> |
| 38 | + <!-- Take top-level depedendency on Microsoft.Data.SqlClient, because NPoco.SqlServer depends on a vulnerable version --> |
30 | 39 | <PackageReference Include="Microsoft.Data.SqlClient" />
|
31 | 40 | </ItemGroup>
|
32 | 41 |
|
|
0 commit comments