CodeQL alert 1: BindText's enum arm dispatches to every ToString override #78

CodeQL code-scanning alert #1 (cs/information-exposure-through-exception, error) flags tools/probe/corpus/harness/HttpHost.cs:297: the body Hx.Send sends would depend on exception information (JsonException.Path, read by Sides.Answer.Stage in Sides.cs:41).

It is a false positive. The SARIF's code flow runs JsonException.Path → Sides.Answer.Stage → Sides.Answer.ToString() → Hx.BindText → the binding probe's form body → Hx.Send. The step from Answer.ToString() into BindText is the arm "enum" or "flags-enum" => plain.ToString()!, where plain is typed object: CodeQL resolves the virtual call to every ToString override in the database, Answer's among them. At run time plain there is always a boxed enum, and the request goes to the harness's own in-process TestServer. Nothing in the harness ships.

Fix: cast to Enum in that arm (((Enum)plain).ToString()), which narrows the call to Enum.ToString() with the same text, and so removes the flow without a suppression or a dismissal. The alert closes when main is next analysed after the release merges.