Enhance Settings & Welcome Pages and MCP Installation Flow (AST-107883)

[cx-rahul-pidde]

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

This PR introduces several improvements and fixes across the Visual Studio extension

• Settings Page:
  - Refactored logic for scanner enable/disable and user preferences.
  - Improved error handling and configuration management.
  - Added/updated UI elements for better user experience.

• Welcome Page:

  • Fixed icon resource loading using constants and correct namespaces.
  • Ensured robust handling of embedded resources (.ico/.png).
  • Improved UI theming and contrast for better accessibility.

• MCP Installation:

  • Refactored MCP install/uninstall/config logic for reliability.
  • Enhanced error handling and user feedback during installation.
  • Improved config file management and safe dictionary access.

Checklist

• I have added documentation for new/changed functionality in this PR (if applicable).
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

[github-actions]

Checkmarx One – Scan Summary & Details – 4fbdbbb5-11a2-45ab-ba17-1323ad20a6d5

---

New Issues (20)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 303	details Method GetConfigSnapshot at line 303 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
2		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 302	details Method GetConfigSnapshot at line 302 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
3		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 303	details Method GetConfigSnapshot at line 303 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
4		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 290	details Method GetCxConfig at line 290 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
5		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 291	details Method GetCxConfig at line 291 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
6		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 302	details Method GetConfigSnapshot at line 302 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
7		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 303	details Method GetConfigSnapshot at line 303 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
8		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 290	details Method GetCxConfig at line 290 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
9		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 291	details Method GetCxConfig at line 291 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
10		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 302	details Method GetConfigSnapshot at line 302 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
11		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 303	details Method GetConfigSnapshot at line 303 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
12		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 290	details Method GetCxConfig at line 290 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
13		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 291	details Method GetCxConfig at line 291 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
14		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 302	details Method GetConfigSnapshot at line 302 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
15		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 290	details Method GetCxConfig at line 290 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
16		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 291	details Method GetCxConfig at line 291 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
17		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 290	details Method GetCxConfig at line 290 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
18		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 291	details Method GetCxConfig at line 291 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This elemen... Attack Vector
19		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 302	details Method GetConfigSnapshot at line 302 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector
20		Log_Forging	/ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs: 303	details Method GetConfigSnapshot at line 303 of /ast-visual-studio-extension/CxPreferences/CxPreferencesUI.cs gets user input from element Text. This ... Attack Vector

---

Policy Management Violations (2)

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities		true
Commercial packages		true