Chapter 10: Using Components with Known Vulnerabilities

ASP.NET Core web developers rely on third-party commercial and open source frameworks, libraries, and packages to build web applications. This approach speeds up development time to support the rapid pace of business needs. While this saves developers a lot of time, there is a risk associated with using externally developed components. Code security in these libraries is often not guaranteed and, as with any other software, there will be security flaws. Software composition analysis (SCA) is necessary to find out whether your ASP.NET Core web application is using outdated and vulnerable packages.

In this chapter, we're going to cover the following recipes:

• Fixing the use of a vulnerable third-party JavaScript library
• Fixing the use of a vulnerable NuGet package
• Fixing the use of a library hosted from an untrusted source

By the end of this chapter, you will have learned how to use browser add-ons...