Log in
Confluence
  • Spaces
  • Hit enter to search
  • Help
    • Online Help
    • Keyboard Shortcuts
    • Feed Builder
    • What’s new
    • About Confluence
  • Log in

SEI CERT Oracle Coding Standard for Java
  • Pages

Space shortcuts

  • Dashboard
  • Secure Coding Home
  • Android
  • C
  • C++
  • Java
  • Perl

Page tree

Browse pages
    • Attachments (0)
    • Page History
    • Page Information
    • Resolved comments
    • View in Hierarchy
    • View Source
    • Export to PDF
    • Export to Word
  1. Pages
  2. SEI CERT Oracle Coding Standard for Java
  3. 3 Recommendations
  • Jira links

Rec. 00. Input Validation and Data Sanitization (IDS)
  • Created by Sandy Shrum, last updated by David Svoboda on Aug 07, 2025 1 minute read

  • Page:
    IDS50-J. Use conservative file naming conventions
  • Page:
    IDS51-J. Properly encode or escape output
  • Page:
    IDS52-J. Prevent code injection
  • Page:
    IDS53-J. Prevent XPath Injection
  • Page:
    IDS54-J. Prevent LDAP injection
  • Page:
    IDS55-J. Understand how escape characters are interpreted when strings are loaded
  • Page:
    IDS56-J. Prevent arbitrary file upload

  

  • ids
  • recommendation-list
Overview
Content Tools
  • Powered by Atlassian Confluence 9.2.12
  • Printed by Atlassian Confluence 9.2.12
  • Report a bug
  • Atlassian News
Atlassian

Carnegie Mellon University
Software Engineering Institute
4500 Fifth Avenue
Pittsburgh, PA 15213-2612
412-268-5800

Contact Us
  • Office Locations|
  • Additional Sites Directory|
  • Legal|
  • Privacy Notice|
  • CMU Ethics Hotline|
  • www.sei.cmu.edu

©2025 Carnegie Mellon University

{"serverDuration": 62, "requestCorrelationId": "81d02c369354bdfc"}