Document Details
Threat Modeling Tool Input Validation
❌
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Bias Types:
⚠️
windows_first
⚠️
windows_tools
⚠️
missing_linux_example
⚠️
powershell_heavy
Summary:
The documentation demonstrates a strong Windows and .NET bias. All code examples are in C# and target .NET/ASP.NET technologies, with configuration examples referencing IIS and web.config. References and steps often mention Windows-specific technologies (MSXML, http.sys, IIS, Win32 APIs) and Microsoft-centric frameworks (WCF, MVC, Web Forms). There are no Linux, cross-platform, or open-source web server examples (e.g., Apache, Nginx), nor are there any code samples in languages common on Linux (e.g., Python, Java, Node.js). Even generic security concepts are illustrated exclusively with Microsoft tooling and patterns.
Recommendations:
- Provide equivalent examples for Linux-based environments, such as configuring headers in Apache (using .htaccess) or Nginx.
- Include code samples in other popular web languages (Python/Flask, Node.js/Express, Java/Spring) to demonstrate input validation and security controls.
- Reference cross-platform XML libraries and demonstrate disabling entity resolution in Java (SAX/DOM), Python (lxml), and Node.js.
- When discussing HTTP headers, show how to set them in non-IIS environments (e.g., with Nginx, Apache, or via application code in various languages).
- Avoid assuming .NET or Windows as the default; structure sections to present cross-platform or language-agnostic guidance first, then provide platform-specific details.
- Mention open-source alternatives to Microsoft-specific libraries (e.g., OWASP Java Encoder, Python's html.escape for output encoding).
- Balance references and links to include non-Microsoft documentation and best practices from the broader security community.
Create pull request
Scan History
| Date | Scan ID | Status | Bias Status |
|---|---|---|---|
| 2025-08-17 00:01 | #83 | in_progress | ✅ Clean |
| 2025-07-13 21:37 | #48 | completed | ❌ Biased |
| 2025-07-12 23:44 | #41 | in_progress | ❌ Biased |