...
Using incompatible encodings when communicating string data between JVMs can result in corrupted data.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
STR04-J | Low | Unlikely | Medium | P2 | L3 |
Automated Detection
Sound automated detection of this vulnerability is not feasible.
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| The Checker Framework |
| Tainting Checker | Trust and security errors (see Chapter 8) | ||||||
| SonarQube |
| S1943 | Classes and methods that rely on the default system encoding should not be used |
Bibliography
...
...