SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 92

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 93

changes.mady.by.user Carol J. Lallier

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The script in this example prints "dummy" and then writes "some text" to a configuration file called config.cfg.  An actual exploit can execute arbitrary code.

...

Bibliography

[API 2013]Package javax.script
[OWASP 2013]Code Injection in Java

...