Skip to content

Reference Uri and UriBuilder threat model docs from public documentation #52465

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MihaZupan merged 7 commits into from
Mar 18, 2026
Merged

Reference Uri and UriBuilder threat model docs from public documentation #52465

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
3b6ba02
Add references to Uri and UriBuilder threat model documents in securi…
Copilot Mar 18, 2026
7e83d18
Use active voice for threat model reference sentence
Copilot Mar 18, 2026
a800796
Simplify threat model reference wording to 'design and security consi…
Copilot Mar 18, 2026
b365b6f
Tweak comment
MihaZupan Mar 18, 2026
d39fb3c
Apply suggestion
MihaZupan Mar 18, 2026
0657760
Apply suggestions from code review
MihaZupan Mar 18, 2026
5c71a54
Improve sentence structure
MihaZupan Mar 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion docs/fundamentals/runtime-libraries/system-uri.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
---
title: System.Uri class
description: Learn about the System.Uri class.
ms.date: 12/31/2023
ms.date: 03/18/2026
ai-usage: ai-assisted
---
# System.Uri class

Expand Down Expand Up @@ -144,6 +145,11 @@ This validation can be used in other cases, like when dealing with UNC paths, by
Uri baseUri = new Uri(@"\\host\share\some\directory\name\");
```

For more details about the design and security considerations of <xref:System.Uri> and <xref:System.UriBuilder>, review the following threat model documents:

- [System.Uri threat model](https://github.com/dotnet/runtime/blob/main/src/libraries/System.Private.Uri/docs/System.Uri%20Threat%20Model.md)
- [System.UriBuilder threat model](https://github.com/dotnet/runtime/blob/main/src/libraries/System.Private.Uri/docs/System.UriBuilder%20Threat%20Model.md)

## Performance considerations

If you use a *Web.config* file that contains URIs to initialize your application, additional time is required to process the URIs if their scheme identifiers are nonstandard. In such a case, initialize the affected parts of your application when the URIs are needed, not at start time.
Loading