Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: language xref addition

...

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Other Languages

This rule appears in the C++ Secure Coding Standard as FIO30-CPP. Exclude user input from format strings.

This rule appears in the C Secure Coding Standard as FIO30-CPP. Exclude user input from format strings.

References

Wiki Markup
\[[API 06|AA. Java References#API 06]\] [Class Formatter|http://java.sun.com/javase/6/docs/api/java/util/Formatter.html]
\[[Seacord 05|AA. Java References#Seacord 05]\] Chapter 6, Formatted Output