Безопасность приложения на Visual Basic

Module Demo
    Function ParseQuantity(raw As String) As Integer
        Dim value As Integer
        If Not Integer.TryParse(raw, value) OrElse value < 1 OrElse value > 1000 Then
            Throw New ArgumentException("quantity")
        End If
        Return value
    End Function
End Module

Option Strict On
Namespace ReviewCase26_1
    Module Demo
        Function ParseQuantity(reviewRaw As String) As Integer
            Dim value As Integer
            If Not Integer.TryParse(reviewRaw, value) OrElse value < 1 OrElse value > 1000 Then
                Throw New ArgumentException("quantity")
            End If
            Return value
        End Function
    End Module
End Namespace

Option Explicit On
Option Infer On
Namespace BoundaryCase26_1
    Module Demo
        Function ParseQuantity(edgeRaw As String) As Integer
            Dim value As Integer
            If Not Integer.TryParse(edgeRaw, value) OrElse value < 1 OrElse value > 1000 Then
                Throw New ArgumentException("quantity")
            End If
            Return value
        End Function
    End Module
End Namespace

Class SecretProvider
    Public Function GetDatabasePassword() As String
        Dim value = Environment.GetEnvironmentVariable("APP_DB_PASSWORD")
        If String.IsNullOrWhiteSpace(value) Then
            Throw New InvalidOperationException("secret missing")
        End If
        Return value
    End Function
End Class

Option Strict On
Namespace ReviewCase26_2
    Class SecretProvider
        Public Function GetDatabasePassword() As String
            Dim value = Environment.GetEnvironmentVariable("APP_DB_PASSWORD")
            If String.IsNullOrWhiteSpace(value) Then
                Throw New InvalidOperationException("secret missing")
            End If
            Return value
        End Function
    End Class
End Namespace

Option Explicit On
Option Infer On
Namespace BoundaryCase26_2
    Class SecretProvider
        Public Function GetDatabasePassword() As String
            Dim value = Environment.GetEnvironmentVariable("APP_DB_PASSWORD")
            If String.IsNullOrWhiteSpace(value) Then
                Throw New InvalidOperationException("secret missing")
            End If
            Return value
        End Function
    End Class
End Namespace

Imports System.Data.Common
Module Demo
    Function FindUser(command As DbCommand, email As String) As DbDataReader
        command.CommandText = "select id,email from users where email=@email"
        Dim parameter = command.CreateParameter()
        parameter.ParameterName = "@email"
        parameter.Value = email
        command.Parameters.Add(parameter)
        Return command.ExecuteReader()
    End Function
End Module

Option Strict On
Imports System.Data.Common
Namespace ReviewCase26_3
    Module Demo
        Function FindUser(reviewCommand As DbCommand, reviewEmail As String) As DbDataReader
            reviewCommand.CommandText = "select id,reviewEmail from users where reviewEmail=@reviewEmail"
            Dim parameter = reviewCommand.CreateParameter()
            parameter.ParameterName = "@reviewEmail"
            parameter.Value = reviewEmail
            reviewCommand.Parameters.Add(parameter)
            Return reviewCommand.ExecuteReader()
        End Function
    End Module
End Namespace

Option Explicit On
Option Infer On
Imports System.Data.Common
Namespace BoundaryCase26_3
    Module Demo
        Function FindUser(edgeCommand As DbCommand, edgeEmail As String) As DbDataReader
            edgeCommand.CommandText = "select id,edgeEmail from users where edgeEmail=@edgeEmail"
            Dim parameter = edgeCommand.CreateParameter()
            parameter.ParameterName = "@edgeEmail"
            parameter.Value = edgeEmail
            edgeCommand.Parameters.Add(parameter)
            Return edgeCommand.ExecuteReader()
        End Function
    End Module
End Namespace

Imports System.Text.Json
Module Demo
    Function ReadMessage(raw As String) As Message
        Dim options = New JsonSerializerOptions With {.PropertyNameCaseInsensitive = True}
        Dim message = JsonSerializer.Deserialize(Of Message)(raw, options)
        If message Is Nothing OrElse message.Kind <> "order" Then Throw New JsonException("unsupported message")
        Return message
    End Function
End Module

Option Strict On
Imports System.Text.Json
Namespace ReviewCase26_4
    Module Demo
        Function ReadMessage(reviewRaw As String) As Message
            Dim reviewOptions = New JsonSerializerOptions With {.PropertyNameCaseInsensitive = True}
            Dim reviewMessage = JsonSerializer.Deserialize(Of Message)(reviewRaw, reviewOptions)
            If reviewMessage Is Nothing OrElse reviewMessage.Kind <> "order" Then Throw New JsonException("unsupported reviewMessage")
            Return reviewMessage
        End Function
    End Module
End Namespace

Option Explicit On
Option Infer On
Imports System.Text.Json
Namespace BoundaryCase26_4
    Module Demo
        Function ReadMessage(edgeRaw As String) As Message
            Dim edgeOptions = New JsonSerializerOptions With {.PropertyNameCaseInsensitive = True}
            Dim edgeMessage = JsonSerializer.Deserialize(Of Message)(edgeRaw, edgeOptions)
            If edgeMessage Is Nothing OrElse edgeMessage.Kind <> "order" Then Throw New JsonException("unsupported edgeMessage")
            Return edgeMessage
        End Function
    End Module
End Namespace

Class PlatformGuard
    Public Sub EnsureSupported()
        If Not OperatingSystem.IsWindowsVersionAtLeast(10) Then Throw New PlatformNotSupportedException()
        If Not Environment.Is64BitProcess Then Throw New PlatformNotSupportedException("x64 required")
    End Sub
End Class

Option Strict On
Namespace ReviewCase26_5
    Class PlatformGuard
        Public Sub EnsureSupported()
            If Not OperatingSystem.IsWindowsVersionAtLeast(11) Then Throw New PlatformNotSupportedException()
            If Not Environment.Is64BitProcess Then Throw New PlatformNotSupportedException("x64 required")
        End Sub
    End Class
End Namespace

Option Explicit On
Option Infer On
Namespace BoundaryCase26_5
    Class PlatformGuard
        Public Sub EnsureSupported()
            If Not OperatingSystem.IsWindowsVersionAtLeast(9) Then Throw New PlatformNotSupportedException()
            If Not Environment.Is64BitProcess Then Throw New PlatformNotSupportedException("x64 required")
        End Sub
    End Class
End Namespace

Class SecurityTests
    <Theory>
    <InlineData("..\secret.txt")>
    <InlineData("C:\Windows\system.ini")>
    Public Sub RejectsPathsOutsideStorage(path As String)
        Assert.Throws(Of SecurityException)(Sub() Storage.Open(path))
    End Sub
End Class

Option Strict On
Namespace ReviewCase26_6
    Class SecurityTests
        <Theory>
        <InlineData("..\secret.txt")>
        <InlineData("C:\Windows\system.ini")>
        Public Sub RejectsPathsOutsideStorage(reviewPath As String)
            Assert.Throws(Of SecurityException)(Sub() Storage.Open(reviewPath))
        End Sub
    End Class
End Namespace

Option Explicit On
Option Infer On
Namespace BoundaryCase26_6
    Class SecurityTests
        <Theory>
        <InlineData("..\secret.txt")>
        <InlineData("C:\Windows\system.ini")>
        Public Sub RejectsPathsOutsideStorage(edgePath As String)
            Assert.Throws(Of SecurityException)(Sub() Storage.Open(edgePath))
        End Sub
    End Class
End Namespace