Page History

...

Code Block

bgColor	#ccccff

grant codeBase "file:/home/programpath/" {
  permission java.io.FilePermission "/${user.home}/me*", "read, write";
};

This solution requires that the user's home directory is a secure directory as described in rule FIO00-J.

...

The CERT C Secure Coding Standard	FIO02-C. Canonicalize path names originating from untrusted sources
The CERT C++ Secure Coding Standard	FIO02-CPP. Canonicalize path names originating from untrusted sources
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f46b4b2b982a5d65-7cd62610-464a49d9-a9279e6b-3875e7722ff7c6c4647cb8ea"><ac:plain-text-body><![CDATA[	[ISO/IEC TR 24772:2010	http://www.aitcnet.org/isai/]	Path Traversal [EWR]	]]></ac:plain-text-body></ac:structured-macro>
MITRE CWE	CWE-171. Cleansing, canonicalization, and comparison errors
	CWE-647. Use of non-canonical URL paths for authorization decisions

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f3e474fb183c2e2c-d378088a-405b447d-b4a2b7b4-5fc50a3c8e3e2197b4faf0d9"><ac:plain-text-body><![CDATA[	[[API 2006	AA. Bibliography#API 06]]	[method getCanonicalPath()	http://java.sun.com/javase/6/docs/api/java/io/File.html#getCanonicalPath()]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7908fb939bbf2e05-328569ba-40684a6c-b21591ea-114c9b23a932b65846907cff"><ac:plain-text-body><![CDATA[	[[Harold 1999	AA. Bibliography#Harold 99]]		]]></ac:plain-text-body></ac:structured-macro>

...

Space shortcuts