Page History

The CERT C Secure Coding Standard

FIO02-C. Canonicalize path names originating from untrusted sources

The CERT C++ Secure Coding Standard

FIO02-CPP. Canonicalize path names originating from untrusted sources

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="fda30c15-1fbc-43b1-9b2e-4c4371a4b7e3"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

"Authentication Logic Error [XZO]"

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE ID 171, "Cleansing, Canonicalization, and Comparison Errors"

CWE ID 647, "Use of Non-Canonical URL Paths for Authorization Decisions"

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="8bf931c5e0368a4e-549fbb7f-464c44bb-9b7f9237-9e4fc558dbe199cbf8c0982e"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method getCanonicalPath()

http://java.sun.com/javase/6/docs/api/java/io/File.html#getCanonicalPath()]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="82a547d14697a049-cfb9c147-40cc4b65-829f8cc3-2ebaee93a81b92a033ef5c94"><ac:plain-text-body><![CDATA[

[[Harold 1999

AA. Bibliography#Harold 99]]

]]></ac:plain-text-body></ac:structured-macro>