lang:

ASP.Net

regex:

ServerCertificateValidationCallback\s*?\=

description:

Possibly disabling certificate validation, ensure not set to delegate { return true; };

Reference: http://dejanstojanovic.net/aspnet/2014/september/bypass-ssl-certificate-validation/
tags:
insecure certificate validation cwe-295
results