Veracode throws Technology-Specific Input Validation Problems (CWE ID 100)

manpreet Best Answer 2 years ago

Error Heading Technology-Specific Input Validation Problems (CWE ID 100)

Error description: Weaknesses in this category are caused by inadequately implemented input validation within particular technologies.

This error showing the error number where the constructor declared example below

public class BusinessRecipient : IModel
{
public List ChProperties { get; set; }
public bool SldDisable { get; set; }

public BusinessRecipient()
{
ChProperties = new List();
 }
}

I have tried the data annotation solution

public class BusinessRecipient : IModel
{
[Required]
public List ChProperties { get; set; }
public bool SldDisable { get; set; }  

public BusinessRecipient()
{        
ChProperties = new List();     
 }
}