SEI CERT Perl Coding Standard

Space shortcuts

Page tree

Title: IDS33-PL. Sanitize untrusted data passed across a trust boundary  
Author: David Svoboda Jun 08, 2012
Last Changed by: Will Snavely Nov 16, 2017
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/qlxMBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (3)
    Page: IDS00-J. Prevent SQL injection
    Page: IDS16-J. Prevent XML Injection
    Page: IDS17-J. Prevent XML External Entity Attacks
SEI CERT Perl Coding Standard (2)
    Page: IDS01-PL. Use taint mode while being aware of its limitations
    Page: IDS34-PL. Do not pass untrusted, unsanitized data to a command interpreter
Hierarchy
Parent Page
    Page: Rule 01. Input Validation and Data Sanitization (IDS)
Labels
Global Labels (2)
Recent Changes
Time Editor  
Nov 16, 2017 14:45 Will Snavely View Changes
Apr 01, 2015 02:46 Will Snavely View Changes
Apr 01, 2015 02:45 Will Snavely View Changes
Apr 01, 2015 02:31 Will Snavely View Changes
Apr 01, 2015 01:34 Will Snavely  
Outgoing Links
External Links (11)
    perldoc.perl.org/perlsec.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.59/cgi_docs.html#…
    search.cpan.org/%7Etimb/DBI-1.622/DBI.pm#available_drivers
    www.kb.cert.org/vuls/id/282403
    www.oreillynet.com/onlamp/blog/2006/11/perls_taint_mode_to_…
    gunther.web66.com/FAQS/taintmode.html
    www.kb.cert.org/vuls/id/246409
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    search.cpan.org/dist/CGI/
SEI CERT C++ Coding Standard (2)     Page: VOID STR02-CPP. Sanitize data passed to complex subsystems
    Home page: SEI CERT C++ Coding Standard
SEI CERT Perl Coding Standard (3)     Home page: SEI CERT Perl Coding Standard
    Page: AA. Bibliography
    Page: IDS33-PL. Sanitize untrusted data passed across a trust boundary
SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java
    Page: IDS00-J. Prevent SQL injection
SEI CERT C Coding Standard (2)     Page: STR02-C. Sanitize data passed to complex subsystems
    Home page: SEI CERT C Coding Standard