SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 6

changes.mady.by.user David Svoboda

Saved on

compared with

New Version Current

changes.mady.by.user David Svoboda

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Generated Content
Info
title
Note

This page is automatically generated from the "Automated Detection" sections in the individual guidelines. Do not modify this page directly.

...

was automatically generated and should not be edited.

Note

The information on this page was provided by outside contributors and has not been verified by SEI CERT.

Tip

The table below can be re-ordered, by clicking column headers.

...

Include Page
Klocwork_V
Klocwork_V

Checker

Guideline

JAVA.SV.DATAXML.BOUNDINVALID IDS00 IDS16-J. Sanitize untrusted data passed across a trust boundaryPrevent XML Injection
SV.DATA.DB IDS00-J. Sanitize untrusted data passed across a trust boundary
SV.HTTP_SPLITIDS00-J. Sanitize untrusted data passed across a trust boundary
SV.PATHIDS00-J. Sanitize untrusted data passed across a trust boundary
SV.PATH.INJIDS00-J. Sanitize untrusted data passed across a trust boundary
-J. Prevent SQL injection
SV.EXEC IDS06-J. Exclude unsanitized user input from format strings
SV.EXEC.DIR IDS06-J. Exclude unsanitized user input from format strings
SV.EXEC.ENV IDS06-J. Exclude unsanitized user input from format strings
SV.EXEC.LOCAL IDS06-J. Exclude unsanitized user input from format strings
SV.EXEC.PATH IDS06-J. Exclude unsanitized user input from format strings
SV.SQL IDS00-J. Prevent SQL injection
SV.SQL.DBSOURCE IDS00-J. Prevent SQL injection SV.SQLIDS00-J. Sanitize untrusted data passed across a trust boundary
SVLOG_FORGING IDS03-J. Do not log unsanitized user input