...
Code Block | ||
---|---|---|
| ||
logger.severe(""Invalid username:"" + getUserName()); |
Compliant Solution
...
Code Block | ||
---|---|---|
| ||
String username = getUserName(); sanitize(username); logger.severe(""Invalid username:"" + username); |
Risk Assessment
...
Wiki Markup |
---|
\[[API 06|AA. Java References#API 06]\] \[[MITRE 09|AA. Java References#MITRE 09]\] [CWE ID 144|http://cwe.mitre.org/data/definitions/144.html] and [CWE ID 150|http://cwe.mitre.org/data/definitions/150.html] |
...
FIO36-J. Do not create multiple buffered wrappers on an InputStream 09. Input Output (FIO) 09. Input Output (FIOEXC33-J. Throw specific exceptions as opposed to the more general RuntimeException or Exception 13. Exceptional Behavior (EXC) 14. Serialization (SER)