Professional Edition 0.8 Release Notes

Puma Scan’s 0.8.0 release is a minor update that upgrades to the latest version of the .NET Compiler API libraries (2.9) and officially supports .NET Core code analysis.

System Requirements

• End User Edition requires Visual Studio v15.8 or higher

End User Edition

• Version 0.8.0 is the first official release that no longer supports Visual Studio 2015.

• Running the .NET Compiler API v2.9 requires Visual Studio version 15.8 and higher. More details can be found on the Roslyn Wiki Page.

• Puma Scan Pro users running Visual Studio versions prior to 15.8 will need to either upgrade Visual Studio or install Puma Scan Professional End User Version 0.7.5.

• A new PumaScan menu item was added to Visual Studio for accessing the Report and About features.
  
  

  

Server Edition

• The command line scanner supports scanning .NET Standard and .NET Core project files

• The command line scanner now uses the Visual Studio 2017 Build Tools

Framework Enhancements

• New tainted sources added for the following .NET Core libraries:

  • Microsoft.AspNetCore.Mvc.Controller.*

  • Microsoft.AspNetCore.Http.Request.Body

  • Microsoft.AspNetCore.Http.Request.Cookies

  • Microsoft.AspNetCore.Http.Request.Form

  • Microsoft.AspNetCore.Http.Request.Headers

  • Microsoft.AspNetCore.Http.Request.Query

  • Microsoft.AspNetCore.Http.Request.QueryString

  • Microsoft.AspNetCore.Mvc.ControllerBase

  • Microsoft.AspNetCore.Mvc.IActionResult

  • Microsoft.AspNetCore.Mvc.FileStreamResult

  • Microsoft.AspNetCore.Mvc.PhysicalFileResult

  • Microsoft.AspNetCore.Mvc.VirtualFileResult

• New cleanse methods added for the following .NET Core libraries:

  • System.Text.Encodings.Web.HtmlEncoder.Encode

  • System.Text.Encodings.Web.JavaScriptEncoder.Encode

  • System.Text.Encodings.Web.UrlEncoder.Encode

  • Microsoft.AspNetCore.Mvc.UrlHelper.IsLocalUrl

• Bug Fix: Data flow engine bug losing context when iterating through a foreach loop.