SEI CERT Perl Coding Standard

Space shortcuts

Page tree

Title: IDS34-PL. Do not pass untrusted, unsanitized data to a command interpreter  
Author: David Svoboda Jun 19, 2012
Last Changed by: Will Snavely Nov 16, 2017
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/x1xMBQ
Export As: Word · PDF  
Hierarchy
Parent Page
    Page: Rule 01. Input Validation and Data Sanitization (IDS)
Labels
Global Labels (2)
Recent Changes
Time Editor  
Nov 16, 2017 14:45 Will Snavely View Changes
Apr 01, 2015 02:46 Will Snavely View Changes
Apr 01, 2015 02:45 Will Snavely View Changes
Apr 01, 2015 02:31 Will Snavely View Changes
Apr 01, 2015 01:34 Will Snavely  
Outgoing Links
External Links (6)
    https://www.securecoding.cert.org/confluence/display/perl/D…
    perldoc.perl.org/perlfunc.html
    www.kb.cert.org/vuls/id/583020
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
SEI CERT C++ Coding Standard (2)     Page: VOID ENV02-CPP. Do not call system() if you do not need a command processor
    Home page: SEI CERT C++ Coding Standard
SEI CERT Oracle Coding Standard for Java (2)     Page: IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method
    Home page: SEI CERT Oracle Coding Standard for Java
SEI CERT Perl Coding Standard (4)     Page: AA. Bibliography
    Page: IDS33-PL. Sanitize untrusted data passed across a trust boundary
    Home page: SEI CERT Perl Coding Standard
    Page: IDS31-PL. Do not use the two-argument form of open()
SEI CERT C Coding Standard (2)     Home page: SEI CERT C Coding Standard
    Page: ENV33-C. Do not call system()