Page History

...

This noncompliant code example may also violate rule ERR01-J. Do not allow exceptions to expose sensitive information if the information contained in the exceptions is sensitive.

...

CERT C Secure Coding Standard	STR02-C. Sanitize data passed to complex subsystems
CERT C++ Secure Coding Standard	STR02-CPP. Sanitize data passed to complex subsystems
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a808c240d9611fa9-a8d7d9ba-4b634b65-9c2fb6b9-d0249d14b46bbdf750815c0e"><ac:plain-text-body><![CDATA[	[ISO/IEC TR 24772:2010	http://www.aitcnet.org/isai/]	Injection [RST]	]]></ac:plain-text-body></ac:structured-macro>
MITRE CWE	CWE-116. Improper encoding or escaping of output

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="920796cf6034200e-2e98fed0-45b145d6-b7358750-8677c6e22acde4ec3a32b9c8"><ac:plain-text-body><![CDATA[	[[OWASP 2005	AA. Bibliography#OWASP 05]]		]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="9eeb9f9fe3864d27-5856eb5d-46a04774-b27dae03-dbe8aefadc25a22455fd90eb"><ac:plain-text-body><![CDATA[	[[OWASP 2007	AA. Bibliography#OWASP 07]]		]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="9651f3d85e52d0e1-0dceab60-43624ad6-9e4da294-4788499a3da89e549e64e522"><ac:plain-text-body><![CDATA[	[[OWASP 2008	AA. Bibliography#OWASP 08]]	[Testing for XML Injection (OWASP-DV-008)	https://www.owasp.org/index.php/Testing_for_XML_Injection_%28OWASP-DV-008%29]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="144cecef05ce9d38-51afca78-47cb41e4-a3dba06a-3b3c12f7b8e3debbc971c588"><ac:plain-text-body><![CDATA[	[[W3C 2008	AA. Bibliography#W3C 08]]	4.4.3, Included If Validating	]]></ac:plain-text-body></ac:structured-macro>

...

Space shortcuts