InjectionCop | https : //injectioncop.codeplex.com/

InjectionCop is a C# library. InjectionCop has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

InjectionCop facilitates secure coding through static code analysis and contract annotations in the Common Language Infrastructure. In order to avoid injection scenarios, such as SQL injection or HTML XSS, InjectionCop creates warnings when unverified strings are passed to methods which are considered dangerous, such as HtmlTextWriter.Write or IDbCommand.Text. By default, only constants are considered verified. The developer can explicitly mark parameters to avoid warnings, thus passing the warning to the calling method. E.g. a method SafeFoo (string input) that passes its parameter to HtmlTextWriter.Write would have to mark this parameter as unsafe. Another method that calls Foo() with a non-constant value for 'input' would therefore raise a warning.