SEI CERT Oracle Secure Coding Standard for Java - Guidelines 00. Input Validation and Data Sanitization (IDS)

Opis

Weaknesses in this category are related to the rules and recommendations in the Input Validation and Data Sanitization (IDS) section of the SEI CERT Oracle Secure Coding Standard for Java.

Wpisy w tej grupie

• CWE-116 Improper Encoding or Escaping of Output
• CWE-180 Incorrect Behavior Order: Validate Before Canonicalize
• CWE-289 Authentication Bypass by Alternate Name
• CWE-117 Improper Output Neutralization for Logs
• CWE-144 Improper Neutralization of Line Delimiters
• CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences
• CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
• CWE-134 Use of Externally-Controlled Format String
• CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CWE-182 Collapse of Data into Unsafe Value

Źródła