Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

FIO11-EX0: Binary data that is expected to be a valid string may be read and converted to a string. How to perform this operation securely is explained in IDS13-J. Use compatible encodings on both sides of file or network IO. Also see rule IDS10-J. Do not assume every character in a string is the same sizesplit data representing a single character.

Risk Assessment

Attempting to read a byte array containing raw character data as if it were character data may produce erroneous results.

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="59ca4fa12a60f194-6cea748d-4a514fb9-ac04ab54-2d12c8977dcb4a72ff2acc05"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

class [String

http://java.sun.com/javase/6/docs/api/java/lang/String.html]

]]></ac:plain-text-body></ac:structured-macro>

...