Page History

The CERT C Secure Coding Standard

FIO02-C. Canonicalize path names originating from untrusted sources

The CERT C++ Secure Coding Standard

FIO02-CPP. Canonicalize path names originating from untrusted sources

MITRE CWE

CWE ID 171, "Cleansing, Canonicalization, and Comparison Errors"

CWE ID 647, "Use of Non-Canonical URL Paths for Authorization Decisions"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="c911e4286fd7782d-b6ca804a-449e4452-82ff891b-4e8e13616fd3b495efe951a2"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method getCanonicalPath()

http://java.sun.com/javase/6/docs/api/java/io/File.html#getCanonicalPath()]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="5e0c445c8cdde64e-df1271ea-4b3d4a20-bb048153-6bcc93dbc077472c9b8293c3"><ac:plain-text-body><![CDATA[

[[Harold 1999

AA. Bibliography#Harold 99]]

]]></ac:plain-text-body></ac:structured-macro>