...
Returning null rather than a zero-length array or collection may lead to denial-of-service vulnerabilities when the client code does not handle null properly.
...
Page History
Overview
Content Tools