Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

FIO11-EX0: Binary data that is expected to be a valid string may be read and converted to a string. How to perform this operation securely is explained in IDS13-J. Use compatible encodings on both sides of file or network IO. Also see rule IDS10-J. Do not assume every character in a string is the same sizesplit data representing a single character.

Risk Assessment

Attempting to read a byte array containing raw character data as if it were character data may produce erroneous results.

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="534bee5ce42b90b8-1a4b01f5-4b9c465d-b120af8a-21cc1fe75f283695d19b3d69"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

class [String

http://java.sun.com/javase/6/docs/api/java/lang/String.html]

]]></ac:plain-text-body></ac:structured-macro>

...