SEI CERT Perl Coding Standard - Guidelines 01. Input Validation and Data Sanitization (IDS)

Opis

Weaknesses in this category are related to the rules and recommendations in the Input Validation and Data Sanitization (IDS) section of the SEI CERT Perl Coding Standard.

Wpisy w tej grupie

• CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CWE-134 Use of Externally-Controlled Format String
• CWE-129 Improper Validation of Array Index
• CWE-789 Memory Allocation with Excessive Size Value
• CWE-116 Improper Encoding or Escaping of Output
• CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
• CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Źródła