SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 105

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 106

changes.mady.by.user Carol J. Lallier

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

ISO/IEC TR 24772:2013

Cross-site Scripting [XYT]

MITRE CWE

CWE-289, Authentication bypass by alternate name
CWE-180, Incorrect behavior order: Validate before canonicalize

Bibliography

[API 2006]

Java Platform, Standard Edition 6 API Specification

[Davis 2008]

 

[Weber 2009]

Exploiting Unicode-enabled Software

 

...

IDS00-J. Sanitize untrusted data passed across a trust boundary            

...