Page History

Wiki MarkupMany classes allow inclusion of escape sequences in character and string literals; examples include {{Pattern}} as well as classes that support XML- and SQL-based actions by passing string arguments to methods. According to the Java Language Specification \ [[JLS 2005|AA. References#JLS 05]\], Section 3.10.6, "Escape Sequences for Character and String Literals"

The character and string escape sequences allow for the representation of some nongraphic characters as well as the single quote, double quote, and backslash characters in character literals (§3.10.4) and string literals (§3.10.5).

...

Search for vulnerabilities resulting from the violation of this guideline on the CERT website.

Bibliography

Wiki Markup\[[API 2006|AA. References#API 06] \] [Class Pattern|http://java.sun.com/javase/6/docs/api/java/util/regex/ Pattern.html] "Backslashes, escapes, and quoting" \[
[API 2006|AA. References#API 06]\] [Package java.sql|http://java.sun.com/javase/6/docs/api/java/sql/package-summary.html] \[[JLS 2005|AA. References#JLS 05]\]
[JLS 2005] 3.10.6 Escape Sequences for Character and String Literals

...

IDS16-J. Do not locale-dependent methods on locale-sensitive data without specifying the appropriate locale