Page History

...

Code Block

bgColor	#ccccff

grant codeBase "file:/home/programpath/" {
  permission java.io.FilePermission "/${user.home}/me*", "read, write";
};

This solution requires that the user's home directory is a secure directory as described in rule FIO00-J.

...

The CERT C Secure Coding Standard	FIO02-C. Canonicalize path names originating from untrusted sources
The CERT C++ Secure Coding Standard	FIO02-CPP. Canonicalize path names originating from untrusted sources
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e664856020a2219f-2d166b6e-4f7946b9-bbe8bd9f-00b753777b8b2c25959609b3"><ac:plain-text-body><![CDATA[	[ISO/IEC TR 24772:2010	http://www.aitcnet.org/isai/]	Path Traversal [EWR]	]]></ac:plain-text-body></ac:structured-macro>
MITRE CWE	CWE-171. Cleansing, canonicalization, and comparison errors
	CWE-647. Use of non-canonical URL paths for authorization decisions

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ee17e387056676cb-b737d162-4fb84009-ad1080af-3ed88adeb0d6cc83cc56c185"><ac:plain-text-body><![CDATA[	[[API 2006	AA. Bibliography#API 06]]	[method getCanonicalPath()	http://java.sun.com/javase/6/docs/api/java/io/File.html#getCanonicalPath()]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="5876c9d674557cd0-9a07d797-4b094918-a1339f1d-25d04db7e159804b9269c219"><ac:plain-text-body><![CDATA[	[[Harold 1999	AA. Bibliography#Harold 99]]		]]></ac:plain-text-body></ac:structured-macro>

...

Space shortcuts