Document Details
Threat Modeling Tool Input Validation
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
windows_tools
missing_linux_example
powershell_heavy
Summary
The documentation demonstrates a strong Windows and .NET bias. All code examples are in C# and target .NET/ASP.NET technologies, with configuration examples referencing IIS and web.config. References and steps often mention Windows-specific technologies (MSXML, http.sys, IIS, Win32 APIs) and Microsoft-centric frameworks (WCF, MVC, Web Forms). There are no Linux, cross-platform, or open-source web server examples (e.g., Apache, Nginx), nor are there any code samples in languages common on Linux (e.g., Python, Java, Node.js). Even generic security concepts are illustrated exclusively with Microsoft tooling and patterns.
Recommendations
- Provide equivalent examples for Linux-based environments, such as configuring headers in Apache (using .htaccess) or Nginx.
- Include code samples in other popular web languages (Python/Flask, Node.js/Express, Java/Spring) to demonstrate input validation and security controls.
- Reference cross-platform XML libraries and demonstrate disabling entity resolution in Java (SAX/DOM), Python (lxml), and Node.js.
- When discussing HTTP headers, show how to set them in non-IIS environments (e.g., with Nginx, Apache, or via application code in various languages).
- Avoid assuming .NET or Windows as the default; structure sections to present cross-platform or language-agnostic guidance first, then provide platform-specific details.
- Mention open-source alternatives to Microsoft-specific libraries (e.g., OWASP Java Encoder, Python's html.escape for output encoding).
- Balance references and links to include non-Microsoft documentation and best practices from the broader security community.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-06 18:15 | #225 | cancelled |
 Clean
|
| 2025-08-17 00:01 | #83 | cancelled |
Clean
|
| 2025-07-13 21:37 | #48 | completed |
Biased
|
| 2025-07-12 23:44 | #41 | cancelled |
Biased
|