Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: i decided we didn't need to emphasize "untrusted" in FIO11-EX0 as this should be apply to trusted or untrusted data

...

Do not try to convert the String object to a byte array to obtain the original BigInteger. Character encoded data may yield a byte array which, when converted to a BigInteger, results in a completely different value.

Exceptions

FIO11-EX0: Untrusted binary **: Binary data that is expected to be a valid string may be read and converted to a string. How to perform this operation securely is explained in IDS13-J. Use compatible encodings on both sides of file or network IO. Also see rule IDS10-J. Do not assume every character in a string is the same size.

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="07ebad28f92ce449-e5b49a35-4ac24fd6-83e59d48-e16bfeb3f0e63e76880046b3"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

class [String

http://java.sun.com/javase/6/docs/api/java/lang/String.html]

]]></ac:plain-text-body></ac:structured-macro>

...