Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CWE-183