Page History

The CERT C Secure Coding Standard

FIO02-C. Canonicalize path names originating from untrusted sources

The CERT C++ Secure Coding Standard

FIO02-CPP. Canonicalize path names originating from untrusted sources

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f0fb1efc-5db3-450e-8c6d-a0cf7fe615f0"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

"Authentication Logic Error [XZO]"

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE ID 171, "Cleansing, Canonicalization, and Comparison Errors"

CWE ID 647, "Use of Non-Canonical URL Paths for Authorization Decisions"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="12a1995c237409d9-b4137a35-400a4b3f-b17b9cb6-6c11d3c366a8ec80d10858d2"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method getCanonicalPath()

http://java.sun.com/javase/6/docs/api/java/io/File.html#getCanonicalPath()]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="591138e85849a20f-cbf827a4-42054340-bd03976f-1b8427f29e8f23b00973449d"><ac:plain-text-body><![CDATA[

[[Harold 1999

AA. Bibliography#Harold 99]]

]]></ac:plain-text-body></ac:structured-macro>