.NET MAUI 10.0

Last reviewed Sep 19, 2026

Export as PDF

Prompt Details

Prompt Composition

2prompts
  1. C# 14106 lines · 4.4K tokens
  2. .NET MAUI 10.067 lines · 3.4K tokens
Total173 lines · 7.8K tokens

CWE Coverage

  • 20
  • 22
  • 59
  • 78
  • 79
  • 89
  • 94
  • 117
  • 190
  • 200
  • 201
  • 208
  • 209
  • 214
  • 250
  • 257
  • 295
  • 312
  • 319
  • 323
  • 327
  • 338
  • 346
  • 362
  • 367
  • 378
  • 426
  • 459
  • 489
  • 502
  • 532
  • 552
  • 611
  • 613
  • 639
  • 674
  • 759
  • 770
  • 772
  • 775
  • 798
  • 807
  • 862
  • 915
  • 916
  • 918
  • 922
  • 923
  • 942
  • 1333
  • 1395

Prompt Preview

Apply the C# 14 baseline first. These additional rules cover .NET MAUI 10.0 applications targeting .NET 10 on Android, iOS, Mac Catalyst, and Windows, including applications that use HybridWebView or BlazorWebView.

Storage and recovery

  • Store small credentials with SecureStorage.Default; reserve Preferences.Default for nonsensitive settings. Neither bundled MauiAsset files nor application configuration can protect a client secret.
  • Handle null results and failures from SecureStorage.GetAsync and SetAsync without falling back to plaintext. Remove unreadable entries, using RemoveAll when the store cannot be recovered, and require reauthentication before using protected features.
  • Exclude Android's <application-id>.microsoft.maui.essentials.preferences.xml from backup: restored ciphertext can lack its original encryption keys. Configure android:fullBackupContent for older devices and android:dataExtractionRules for Android 12+ targets, covering cloud backup and device transfer separately. Do not assume android:allowBackup="false" disables every device-transfer mechanism.
  • Handle iOS Keychain entries surviving uninstall: check a first-install marker and clear stale credentials before restoring a session. On Apple targets, use the SecureStorage.Default.SetAsync overload with SecAccessible.WhenUnlockedThisDeviceOnly when credentials must remain device-bound and usable only while unlocked; the default is AfterFirstUnlock, without a biometric challenge on each read.
  • Apply encryption and explicit backup exclusions to sensitive files under