SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 113

changes.mady.by.user Robert Seacord

Saved on

compared with

New Version 114

changes.mady.by.user Robert Seacord

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: added a couple more TS 17961 definitions

...

relativization (URI) [Relativization] is the inverse of resolution. For example, relativizing the URI http://java.sun.com/j2se/1.3/docs/guide/index.html against the base URI http://java.sun.com/j2se/1.3 yields the relative URI docs/guide/index.html [API 2006].

 

Anchor
reentrant
reentrant

reentrant [ISO/IEC/IEEE 24765:2010]
Pertaining to a software module that can be entered as part of one process while also in execution as part of another process and still achieve the desired results.

...

Anchor
sanitization
sanitization
sanitization Sanitization is a term used for validating input and transforming it to a representation that conforms to the input requirements of a complex subsystem. For example, a database may require all invalid characters to be escaped or eliminated prior to their storage. Input sanitization refers to the elimination of unwanted characters from the input by means of removal, replacement, encoding or escaping the characters

Anchor
sanitize
sanitize

sanitize [ISO/IEC TS 17961:2013]
Assure by testing or replacement that a tainted or other value conforms to the constraints imposed by one or more restricted sinks into which it may flow.

NOTE
If the value does not conform, either the path is diverted to avoid using the value or a different, known-conforming value is substituted.

Anchor
security flaw
security flaw

security flaw A software defect [ISO/IEC TS 17961:2013]
Defect that poses a potential security risk [Seacord 2005].

Anchor
security policy
security policy

security policy [Internet Society 2000]
Set of rules and practices that specify or regulate how a system or organization provides security services to protect sensitive and critical system resources.

Anchor
sensitive code
sensitive code

...