Analyzer to warn against using dynamic objects in WebAPI actions

[yaakov-h]

Using weakly typed objects such as JObject (from Newtonsoft.Json) in a WebAPI should result in an error or warning.

Example:

[HttpPost]
[Route("eTailAPI/CarrierBooking/BookLastMileCarrier")]
public string BookLastMileCarrier([FromBody] JObject data)
{
    // ...
}

Any method with [HttpPost], [HttpPut] etc. attributes in a subclass of Controller (ASP.NET MVC / ASP.NET Core) or ApiController (ASP.NET WebAPI) should be detected.

Possibly also any public instance method even without those attributes.

The error should span the parameter declaration.

No code-fix applicable.

Corresponding WTG Work Item: WI00253834