...
| Wiki Markup |
|---|
This noncompliant code example uses the locale sensitive {{String.toUpperCase()}} method to convert an html tag to uppercase. This produces the string ""T?TLE"" in the Turkish locale wherein '?' is the Latin capital letter 'I' with a dot above the character \[[API 06|AA. Java References#API 06]\]. |
| Code Block |
|---|
|
"title""title".toUpperCase();
|
Compliant Solution
This compliant solution explicitly sets the locale to English to avoid the unexpected result.
| Code Block |
|---|
|
"title""title".toUpperCase(Locale.ENGLISH);
|
...
IDS13-J. Properly encode or escape output 10. Input Validation and Data Sanitization (IDS) IDS15-J. Library methods should validate their parameters
