Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Edited by NavBot

...

Code Block
bgColor#FFCCCC
logger.severe(""Invalid username:"" + getUserName());

Compliant Solution

...

Code Block
bgColor#ccccff
String username = getUserName();
sanitize(username);
logger.severe(""Invalid username:"" + username);

Risk Assessment

...

Wiki Markup
\[[API 06|AA. Java References#API 06]\] 
\[[MITRE 09|AA. Java References#MITRE 09]\] [CWE ID 144|http://cwe.mitre.org/data/definitions/144.html] and [CWE ID 150|http://cwe.mitre.org/data/definitions/150.html]

...

FIO36-J. Do not create multiple buffered wrappers on an InputStream      09. Input Output (FIO)      09. Input Output (FIOEXC33-J. Throw specific exceptions as opposed to the more general RuntimeException or Exception      13. Exceptional Behavior (EXC)      14. Serialization (SER)