wip

Author: Tanya-Solyanik

CONTRIBUTING.md

@@ -17,7 +17,7 @@ Whilst most .NET Core/.NET components are cross-platform Windows Forms implement
 Please do:
 
 * **DO** follow our [coding style][coding-style] (C# code-specific)<br/>
-  We strive to wrap the lines around 120 mark, and it's acceptable to stretch to no more than 150 chars (with some exceptions being URLs). [EditorGuidelines VS extension](https://marketplace.visualstudio.com/items?itemName=PaulHarrington.EditorGuidelines) makes it easier to visualise (see https://github.com/dotnet/winforms/pull/4836).
+  We strive to wrap the lines around 120 mark, and it's acceptable to stretch to no more than 150 chars (with some exceptions being URLs). [EditorGuidelines VS extension](https://marketplace.dev.azure.com/items?itemName=PaulHarrington.EditorGuidelines) makes it easier to visualise (see https://github.com/dotnet/winforms/pull/4836).
 * **DO** give priority to the current style of the project or file you're changing even if it diverges from the general guidelines.
 * **DO** include tests when adding new features. When fixing bugs, start with
   adding a test that highlights how the current behavior is broken.

Winforms.sln

@@ -1187,10 +1187,10 @@ Global
 		{C4C031D5-F79A-44B6-811E-0797E7D5C1C1} = {E4C6C5F5-46E9-4C63-9628-26752B4D9C11}
 		{0FD53580-3175-4F8F-8372-BE46C9122EE0} = {583F1292-AE8D-4511-B8D8-A81FE4642DDC}
 		{B653C860-9B52-4597-9921-24DA79A4E6B1} = {583F1292-AE8D-4511-B8D8-A81FE4642DDC}
+		{607E02DD-4256-4E73-B9A4-4CE2673B3703} = {DF68A171-D27B-4E6A-8A7E-63A651622355}
 		{656C66A4-59CD-4E14-8AE4-1F5BCEECB553} = {8B4B1E09-B3C7-4044-B223-94EDEC1CAA20}
 		{D4D97D78-D213-45DF-B003-9C4C9F2E5E1C} = {8B4B1E09-B3C7-4044-B223-94EDEC1CAA20}
 		{442C867C-51C0-8CE5-F067-DF065008E3DA} = {77FEDB47-F7F6-490D-AF7C-ABB4A9E0B9D7}
-		{607E02DD-4256-4E73-B9A4-4CE2673B3703} = {583F1292-AE8D-4511-B8D8-A81FE4642DDC}
 	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		SolutionGuid = {7B1B0433-F612-4E5A-BE7E-FCF5B9F6E136}

docs/analyzers/WinFormsCSharpAnalyzers.Help.md

@@ -32,7 +32,23 @@ set to `DesignerSerializationVisibility.Content` or `DesignerSerializationVisibi
 
 |Item|Value|
 |-|-|
-| Category | ApplicationConfiguration |
+| Category | WinForms Security |
+| Enabled | True |
+| Severity | Warning |
+| CodeFix | False |
+---
+
+## `ImplementITypedDataObjectInAdditionToIDataObject`
+
+`ImplementITypedDataObjectInAdditionToIDataObject` checks for custom implementations of the managed `IDataObject` interface and suggests to also implement the `ITypedDataObject` interface.
+
+### [WFO1001](https://aka.ms/winforms-warnings/WFO1001): Implement ITypedDataObject interface in addition to IDataObject.
+
+Custom data objects must implement `ITypedDataObject` interface in order to support the best practices in reading binary formatted data from the Clipboard or data being dragged and dropped.
+
+|Item|Value|
+|-|-|
+| Category | WinForms Security |
 | Enabled | True |
 | Severity | Warning |
 | CodeFix | False |

docs/coding-style.md

@@ -164,7 +164,7 @@ internal bool SingleVerticalBorderAdded
 ### Nullability
 
 1. Prefer [pattern matching](https://learn.microsoft.com/dotnet/csharp/language-reference/operators/patterns) to check variable type and null state (e.g. `if (parameter is Form form)`, `if (manager.GetService<IContainer>() is { } container)`, etc.).
-1. Using the postfix `!` [null-forgiving operator](https://learn.microsoft.com/dotnet/csharp/language-reference/operators/null-forgiving) to override null analysis must always get a descriptive comment. Prefer to refactor code to avoid this where possible. If we do not control the code in question prefer to throw `ArgumentException` when an associated argument is known or `InvalidOperationException` otherwise. Do not let code fall into `NullReferenceException`.
+1. Using the postfix `!` [null-forgiving operator](https://learn.microsoft.com/dotnet/csharp/language-reference/operators/null-forgiving) to override null analysis must always get a descriptive comment. Prefer to re-factor code to avoid this where possible. If we do not control the code in question prefer to throw `ArgumentException` when an associated argument is known or `InvalidOperationException` otherwise. Do not let code fall into `NullReferenceException`.
 
 ### Visual Basic
 

docs/developer-guide.md

@@ -24,9 +24,9 @@ Windows Forms requires the following workloads and components be selected when i
   ```
 
 * Useful Visual Studio extensions:  
-  * [Editor guidelines](https://marketplace.visualstudio.com/items?itemName=PaulHarrington.EditorGuidelines), see https://github.com/dotnet/winforms/pull/4836 for more information
-  * [VS Color Output](https://marketplace.visualstudio.com/items?itemName=MikeWard-AnnArbor.VSColorOutput64)
-  * [Productivity Power Tools](https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.ProductivityPowerPack2022)
+  * [Editor guidelines](https://marketplace.dev.azure.com/items?itemName=PaulHarrington.EditorGuidelines), see https://github.com/dotnet/winforms/pull/4836 for more information
+  * [VS Color Output](https://marketplace.dev.azure.com/items?itemName=MikeWard-AnnArbor.VSColorOutput64)
+  * [Productivity Power Tools](https://marketplace.dev.azure.com/items?itemName=VisualStudioPlatformTeam.ProductivityPowerPack2022)
 
 ## Workflow
 

src/System.Windows.Forms.Analyzers.CSharp/src/AnalyzerReleases.Unshipped.md

@@ -1,2 +1,7 @@
 ; Unshipped analyzer release
 ; https://github.com/dotnet/roslyn-analyzers/blob/master/src/Microsoft.CodeAnalysis.Analyzers/ReleaseTrackingAnalyzers.Help.md
+### New Rules
+
+Rule ID | Category | Severity | Notes
+--------|----------|----------|-------
+WFO1001 | WinForms Security | Warning | CSharpDiagnosticDescriptors

src/System.Windows.Forms.Analyzers.CSharp/src/Resources/SR.resx

@@ -153,6 +153,7 @@
   <data name="WFO1000AnalyzerMessageFormat" xml:space="preserve">
     <value>Property '{0}' does not configure the code serialization for its property content</value>
   </data>
+
   <data name="AddDesignerSerializationVisibilityCodeFixTitle" xml:space="preserve">
     <value>Add DesignerSerializationVisibilityAttribute to property</value>
   </data>
@@ -165,4 +166,13 @@
   <data name="WFO2001AnalyzerMessageFormat" xml:space="preserve">
     <value>Task is being passed to InvokeAsync without a cancellation token</value>
   </data>
-</root>
+  <data name="WFO1001AnalyzerMessageFormat" xml:space="preserve">
+    <value>Custom data object {0} does not implement `ITypedDataObject` interface</value>
+  </data>
+  <data name="WFO1001AnalyzerTitle" xml:space="preserve">
+    <value>`ITypedDataObject` interface is is not implemented by a custom data object</value>
+  </data>
+  <data name="WFO1001AnalyzerDescription" xml:space="preserve">
+    <value>Custom data object must implement `ITypedDataObject` interface in order to support the best practices in reading binary formatted data from the Clipboard or data being dragged and dropped.</value>
+  </data>
+</root>