...
| Wiki Markup |
|---|
\[[OWASP 05|AA. Java References#OWASP 05]\] [Reviewing Code for OS Injection|http://www.owasp.org/index.php/Reviewing_Code_for_OS_Injection] \[[Chess 07|AA. Java References#Chess 07]\] Chapter 5: Handling Input, "Command Injection" \[[MITRE 09|AA. Java References#MITRE 09]\] [CWE ID 78|http://cwe.mitre.org/data/definitions/78.html] "Failure to Preserve OS Command Structure (aka 'OS Command Injection')" |
...
ENV35MSC31-J. Provide a trusted environment and sanitize all inputsNever hardcode sensitive information 49. Miscellaneous (MSC) 49.Miscellaneous (MSC)MSC33-J. Prevent against SQL Injection