...
Chapter 5, "Handling Input," section "Command Injection" | |
[OWASP 2005] | A Guide to Building Secure Web Applications and Web Services |
[Permissions 2008] | Permissions in the Java™ SE 6 Development Kit (JDK) |
[Seacord 2015] | IDS07-J. Do not pass untrusted, unsanitized data to the Runtime.exec() method LiveLesson |
...