Page History

Wiki Markup Every Java platform has a default character encoding. The available encodings are listed in the _Supported Encodings_ document \[ [Encodings 2006|AA. References#Encodings 06]\]. A conversion between characters and sequences of bytes requires a character encoding to specify the details of the conversion. Such conversions use the system default encoding in the absence of an explicitly specified encoding. When characters are converted into an array of bytes to be sent as output, transmitted across some communication channel, input, and converted back into characters, compatible encodings must be used on both sides of the conversation. Disagreement over character encodings can cause data corruption.

According to the Java API [API 2006] for the String class:

...

Sound automated detection of this vulnerability is not feasible.

Bibliography

...

IDS12-J. Perform lossless conversion of String data between differing character encodings            01. Declarations and Initialization (DCL)