Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Wiki Markup
Many classes, including {{Pattern}} and those that support {{XML}} and {{SQL}} based actions by passing {{String}} arguments to methods, allow inclusion of escape sequences in character and string literals. According to the Java Language Specification \[[JLS 2005|AA. Java References#JLS 05]\], sectionSection 3.10.6, "Escape Sequences for Character and String Literals":

The character and string escape sequences allow for the representation of some nongraphic characters as well as the single quote, double quote, and backslash characters in character literals (§3.10.4) and string literals (§3.10.5).

...

Incorrect use of escape characters in String literals can result in misinterpretation and potential corruption of data.

Rule Guideline

Severity

Likelihood

Remediation Cost

Priority

Level

IDS17-J

low

unlikely

high

P1

L3

...