Page History

...

Code Block

bgColor	#ccccff

// ...
String dir = null;

int number = Integer.parseInt(System.getproperty("dir")); // only allow integer choices
switch (number) {
  case 1: 
    dir = "data1";
    break; // Option 1
  case 2: 
    dir = "data2";
    break; // Option 2
  default: // invalid
    break; 
}
if (dir == null) {
  // handle error
}

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="d43ef9b3cb16536e-316d1e22-488c4365-b8f2a193-e58aa6a9817f7b9a593afe40"><ac:plain-text-body><![CDATA[	[CVE-2010-0886]	[Sun Java Web Start Plugin Command Line Argument Injection	http://www.securitytube.net/video/1465]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="251e0cfc62c1f1d8-30bcdbde-472743d6-8a50adaa-23595a8f6a2a77c683704b29"><ac:plain-text-body><![CDATA[	[CVE-2010-1826]	[Command injection in updateSharingD's handling of Mach RPC messages	http://securitytracker.com/id/1024617]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="863d5fe49f009ab6-df60eda1-493b46f5-b39eaa68-559149abcc96e466ae7b1efc"><ac:plain-text-body><![CDATA[	[T-472]	[Mac OS X Java Command Injection Flaw in updateSharingD Lets Local Users Gain Elevated Privileges	http://www.doecirc.energy.gov/bulletins/t-472.shtml]	]]></ac:plain-text-body></ac:structured-macro>

...

The CERT C Secure Coding Standard	ENV03-C. Sanitize the environment when invoking external programs
	ENV04-C. Do not call system() if you do not need a command processor
The CERT C++ Secure Coding Standard	ENV03-CPP. Sanitize the environment when invoking external programs
	ENV04-CPP. Do not call system() if you do not need a command processor
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b430567c5ac38c2c-4fe51db0-4f104dc4-9499998b-ce19986cc15da383367571ea"><ac:plain-text-body><![CDATA[	[ISO/IEC TR 24772:2010	http://www.aitcnet.org/isai/]	"Injection [RST]"	]]></ac:plain-text-body></ac:structured-macro>
MITRE CWE	CWE-78, "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="16043cae5ce892dd-68a68579-4fee4e7c-ae85848e-974d66769bd9fa3ed6765d68"><ac:plain-text-body><![CDATA[	[[Chess 2007	AA. Bibliography#Chess 07]]	Chapter 5: Handling Input, "Command Injection"]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="33440e7847ec4893-6ece133c-45e64d00-a379926f-319e1a41fa262af5dc6004ed"><ac:plain-text-body><![CDATA[	[[OWASP 2005	AA. Bibliography#OWASP 05]]	[Reviewing Code for OS Injection	http://www.owasp.org/index.php/Reviewing_Code_for_OS_Injection]	]]></ac:plain-text-body></ac:structured-macro>
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="d111b7aa77ac845e-6e2e86b6-47054f4f-94bc8d5d-e7b608cce8c51edd671ccf5b"><ac:plain-text-body><![CDATA[	[[Permissions 2008	AA. Bibliography#Permissions 08]]	[Permissions in the Java™ SE 6 Development Kit (JDK)	http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html], Sun Microsystems, Inc. (2008)	]]></ac:plain-text-body></ac:structured-macro>

...

Space shortcuts

Page tree

Versions Compared

Old Version 111

New Version 112

Key