# dot-net

Published articles for dot-net.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Preventing SQL injection in C# with Entity Framework

DevFeed: [Preventing SQL injection in C# with Entity Framework](<https://devfeed.tech/articles/preventing-sql-injection-in-c-with-entity-framework-8052.md>)

Original publisher: [Read original article](<https://snyk.io/blog/preventing-sql-injection-entity-framework/>)

Author: Brian Vermeer

Published: 2024-07-30T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [.NET](<https://devfeed.tech/topics/net.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [dot-net](<https://devfeed.tech/tags/dot-net.md>), [framework](<https://devfeed.tech/tags/framework.md>), [interest](<https://devfeed.tech/tags/interest.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [sql](<https://devfeed.tech/tags/sql.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

The article explains SQL injection risks in C# applications and discusses using parameterized queries and prepared statements instead of string concatenation or escaping.

### Source excerpt

In this blog, we'll discuss strategies to protect your C# code from SQL injection.

## .NET developers alert: Moq NuGET package exfiltrates user emails from git

DevFeed: [.NET developers alert: Moq NuGET package exfiltrates user emails from git](<https://devfeed.tech/articles/net-developers-alert-moq-nuget-package-exfiltrates-user-emails-from-git-8021.md>)

Original publisher: [Read original article](<https://snyk.io/blog/moq-package-exfiltrates-user-emails/>)

Author: Liran Tal

Published: 2023-08-09T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [.NET](<https://devfeed.tech/topics/net.md>), [NuGet](<https://devfeed.tech/topics/nuget.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Mocking](<https://devfeed.tech/topics/mocking.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [pii](<https://devfeed.tech/topics/pii.md>), [Security](<https://devfeed.tech/topics/security.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Git](<https://devfeed.tech/topics/git.md>), [Azure](<https://devfeed.tech/topics/azure.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [blog](<https://devfeed.tech/tags/blog.md>), [capture](<https://devfeed.tech/tags/capture.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [dot-net](<https://devfeed.tech/tags/dot-net.md>), [git](<https://devfeed.tech/tags/git.md>), [mocking](<https://devfeed.tech/tags/mocking.md>), [net](<https://devfeed.tech/tags/net.md>), [nuget](<https://devfeed.tech/tags/nuget.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [pii](<https://devfeed.tech/tags/pii.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [testing](<https://devfeed.tech/tags/testing.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

The article reports that Moq, a widely used .NET mocking library, began exfiltrating developers' configured Git email addresses starting with version 4.20.0. The data was hashed into an HTTP request to Azure blob storage and shared with a third-party SponsorLink service. Snyk frames the incident as an open-source software supply-chain security and package-health concern.

### Source excerpt

On August 8th 2023, the .NET community was made aware that the testing library called Moq exfiltrates developers emails from their development machine, and sends them off to third-party remote servers.