havendv / fluorinefx

fluorinefx with latest .Net support

fluorinefx

fluorinefx with latest .NET support.

Original repo message

Source code belongs to http://www.fluorinefx.com/

This FluorineFx github project is branched from revision #209 located at http://code.google.com/p/fluorinefx/

What I changed to the source code:

• fixed a bug that occasionated by a race condition in FluorineFx/Messaging/Endpoints/Filter/ProcessFilter.cs. The FactoryInstance class is shared between threads and often get overriden by another thread (http://code.google.com/p/fluorinefx/issues/detail?id=11). A lock was added in order to prevent concurrent access.
• more detailled error messages were added in order to always log the name of the class and the method (in particular: __Res.Invocation_NoSuitableMethod).
• the name of the class/method were added to the exception message that is sent back to flash/flex (ExceptionASO.cs) when something goes wrong.
• documented a bit more some methods/classes.

fluorinefx's Issues

Trying to figure out how to use FluorineFX.Client

I realize this is a port of an existing project but I'm curious if you're able to provide example usage of FluorineFx.Client to make method calls to a server. Thank you for your hard work!

SSRF

XmlDocument load is vulnerable to XXE attacks (XML external entity injection)

it can allow someone to perform SSRF attacks and read local files by sending an AMF request with XML data

Here is some more info that may help https://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca3075