SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 12

changes.mady.by.user Will Snavely

Saved on

compared with

New Version 13

changes.mady.by.user Will Snavely

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

CERT C Coding Standard

STR02-C. Sanitize data passed to complex subsystems

CERT C++ Coding Standard

STR02-CPP. Sanitize data passed to complex subsystems

CERT Perl Coding StandardIDS33-PL. Sanitize untrusted data passed across a trust boundary

ISO/IEC TR 24772:2013

Injection [RST]

MITRE CWE

CWE-116, Improper encoding or escaping of output

Bibliography

[OWASP 2005]

A Guide to Building Secure Web Applications and Web Services

[OWASP 2007]

OWASP Top 10 for Java EE

[OWASP 2008]

Testing for XML Injection (OWASP-DV-008)

[W3C 2008]

4.4.3, "Included If Validating"

 

...

      Rule 00: Input Validation and Data Sanitization (IDS)Image Added