Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The CERT C Secure Coding Standard

FIO02-C. Canonicalize path names originating from untrusted sources

The CERT C++ Secure Coding Standard

FIO02-CPP. Canonicalize path names originating from untrusted sources

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="874b81ecd97da3a1-36c73129-4dd54ebb-99b88b91-a6dd1b3cd0aa535ca8a789ad"><ac:plain-text-body><![CDATA[

[ISO/IEC TR 24772:2010

http://www.aitcnet.org/isai/]

Path Traversal [EWR]

]]></ac:plain-text-body></ac:structured-macro>

MITRE CWE

CWE-171. Cleansing, Canonicalizationcanonicalization, and Comparison Errors comparison errors

 

CWE-647. Use of Nonnon-Canonical canonical URL Paths paths for Authorization Decisions authorization decisions

Bibliography

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="683fffe8d6670582-99f30656-44ec4d07-bc0d9601-4ae3bddc65b61086bb8444f7"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method getCanonicalPath()

http://java.sun.com/javase/6/docs/api/java/io/File.html#getCanonicalPath()]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="99e7c9d774d7c0bd-25d708eb-40f0449b-b618aa61-b59ac5a6171e8ccb3516b3ee"><ac:plain-text-body><![CDATA[

[[Harold 1999

AA. Bibliography#Harold 99]]

 

]]></ac:plain-text-body></ac:structured-macro>

...