SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 103

changes.mady.by.user Robert Seacord

Saved on

compared with

New Version 104

changes.mady.by.user Robert Seacord

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: added CAPEC reference to related guidelines. is this somethign we want to do?

...

ISO/IEC TR 24772:2013

Injection [RST]

MITRE CWE

CWE-144, Improper neutralization of line delimiters
CWE-150, Improper neutralization of escape, meta, or control sequences

MITRE CAPEC

CAPEC-93: Log Injection-Tampering-Forging

Bibliography

[API 2006]

Java Platform, Standard Edition 6 API Specification

[OWASP 2008]

 

[PCI DSS Standard]

Payment Card Industry (PCI) Data Security Standard

...