...
Non-Compliant Code Example
The untrustedCode
method invokes loadLibrary
method in this non-compliant example. This is dangerous as the library gets loaded on behalf of the untrusted code. The acceptance of tainted inputs from the untrusted code further exacerbates the this issue. In essence, untrusted code's class loader may be able to load the intended library even if it does not have sufficient permissions.
...