Add Benchmarking project

NuGetMcpBenchmarks/.gitignore

@@ -0,0 +1,2 @@
+bin/
+obj/

NuGetMcpBenchmarks/VulnerableUpgrade/VulnerableApp.Tests/UserDataServiceTests.cs

@@ -0,0 +1,44 @@
+using Xunit;
+using VulnerableApp;
+
+namespace VulnerableApp.Tests;
+
+public class UserDataServiceTests
+{
+    [Fact]
+    public void SerializeUser_ProducesValidJson()
+    {
+        var service = new UserDataService();
+        var user = new User("Alice", "alice@example.com", 30);
+
+        var json = service.SerializeUser(user);
+
+        Assert.NotNull(json);
+        Assert.Contains("Alice", json);
+        Assert.Contains("alice@example.com", json);
+    }
+
+    [Fact]
+    public void DeserializeUser_RoundTrips()
+    {
+        var service = new UserDataService();
+        var user = new User("Alice", "alice@example.com", 30);
+
+        var result = service.DeserializeUser(service.SerializeUser(user));
+
+        Assert.NotNull(result);
+        Assert.Equal(user.Name, result.Name);
+        Assert.Equal(user.Email, result.Email);
+        Assert.Equal(user.Age, result.Age);
+    }
+
+    [Fact]
+    public void DeserializeUser_ReturnsNull_ForNullJson()
+    {
+        var service = new UserDataService();
+
+        var result = service.DeserializeUser("null");
+
+        Assert.Null(result);
+    }
+}

NuGetMcpBenchmarks/VulnerableUpgrade/VulnerableApp.Tests/VulnerableApp.Tests.csproj

@@ -0,0 +1,17 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <TargetFramework>net8.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.8.0" />
+    <PackageReference Include="xunit" Version="2.6.2" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="2.5.4">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+    <ProjectReference Include="../VulnerableApp/VulnerableApp.csproj" />
+  </ItemGroup>
+</Project>

NuGetMcpBenchmarks/VulnerableUpgrade/VulnerableApp/UserDataService.cs

@@ -0,0 +1,12 @@
+using Newtonsoft.Json;
+
+namespace VulnerableApp;
+
+public class UserDataService
+{
+    public string SerializeUser(User user) => JsonConvert.SerializeObject(user);
+
+    public User? DeserializeUser(string json) => JsonConvert.DeserializeObject<User>(json);
+}
+
+public record User(string Name, string Email, int Age);

NuGetMcpBenchmarks/VulnerableUpgrade/VulnerableApp/VulnerableApp.csproj

@@ -0,0 +1,10 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <TargetFramework>net8.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageReference Include="Newtonsoft.Json" Version="12.0.1" />
+  </ItemGroup>
+</Project>