SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 152

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 153

changes.mady.by.user Carol J. Lallier

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

SEI CERT C Coding Standard

ENV03-C. Sanitize the environment when invoking external programs
ENV33-C. Do not call system()

SEI CERT C++ Coding Standard

ENV03-CPP. Sanitize the environment when invoking external programs
ENV02-CPP. Do not call system() if you do not need a command processor

SEI CERT Perl Secure Coding StandardIDS34-PL. Do not pass untrusted, unsanitized data to a command interpreter

ISO/IEC TR 24772:2013

Injection [RST]

MITRE CWE

CWE-78, Improper Neutralization of Special Elements Used in an OS Command ("OS Command Injection")

...