This analyzer warns when using HttpClient in plugins without setting an explicit Timeout. The default HttpClient timeout is 100 seconds, which may exceed the plugin timeout limit (2 minutes for synchronous plugins).

📚 Set Timeout when making external calls from a plug-in

When making external HTTP calls from plug-ins, set an explicit timeout value to prevent the call from blocking indefinitely. External service delays can cause plugin timeouts.

Not setting a timeout for external HTTP calls causes:

1. Plugin Timeout Errors: External service delays can cause the plugin to exceed its 2-minute timeout
2. Poor User Experience: Users wait indefinitely for unresponsive external services
3. Resource Blocking: Long-running requests block sandbox threads
4. Failed Transactions: If the plugin times out, the entire transaction fails

The analyzer flags instantiation of HttpClient within:

• Classes implementing Microsoft.Xrm.Sdk.IPlugin
• Classes inheriting from System.Activities.CodeActivity

public class MyPlugin : IPlugin
{
    public void Execute(IServiceProvider serviceProvider)
    {
        // ❌ HttpClient with default timeout (100 seconds)
        using (var client = new HttpClient())
        {
            // This could take up to 100 seconds, exceeding plugin timeout
            var response = client.GetAsync("https://api.example.com").GetAwaiter().GetResult();
        }
    }
}

public class MyPlugin : IPlugin
{
    public void Execute(IServiceProvider serviceProvider)
    {
        // ✅ HttpClient with explicit timeout (15 seconds)
        using (var client = new HttpClient())
        {
            client.Timeout = TimeSpan.FromSeconds(15);
            var response = client.GetAsync("https://api.example.com").GetAwaiter().GetResult();
        }
    }
}

1. Set Explicit Timeout: Always set HttpClient.Timeout to a reasonable value
2. Use Short Timeouts: 15-30 seconds is recommended for plugin scenarios
3. Handle Timeout Exceptions: Wrap HTTP calls in try-catch to handle TaskCanceledException

  using (var client = new HttpClient())
  {
+     client.Timeout = TimeSpan.FromSeconds(15);
      var response = client.GetAsync(url).GetAwaiter().GetResult();
  }

Note: Synchronous plugins have a 2-minute timeout. Leave buffer time for other plugin logic.

If you have a legitimate need to suppress this warning:

#pragma warning disable DEVKIT1010
using (var client = new HttpClient())
{
    // Custom timeout handling
}
#pragma warning restore DEVKIT1010

Or in .editorconfig:

[*.cs]
dotnet_diagnostic.DEVKIT1010.severity = suggestion