sonar-scanner-msbuild icon indicating copy to clipboard operation
sonar-scanner-msbuild copied to clipboard

Update CoverageReportDownloader to use System.Uri instead of string

Open costin-zaharia-sonarsource opened this issue 1 year ago • 0 comments

CoverageReportDownloader and ICoverageReportDownloader are using strings instead of Uri.

String representations of URIs or URLs are prone to parsing and encoding errors which can lead to vulnerabilities. The System.Uri class is a safe alternative and should be preferred.

We need to refactor the downloader to use System.Uri.