2.13　IDS12-J在不同的字符编码中无损转换字符串数据在String对象之间进行转换时，如果涉及不同的编码类型，可能会导致数据丢失。根据Java API[API 2006] 对?String.getBytes(Charset)方法的描述：该方法总会替代那些错误格式的输入和不可映射的字符序列，...

《Java安全编码标准》一2.9　IDS08-J净化传递给正则表达式的非受信数据

2.9　IDS08-J净化传递给正则表达式的非受信数据正则表达式在匹配文本字符串时被广泛使用。比如，在POSIX中，grep命令就支持正则表达式，使用它可以在指定文本中搜索模式。如果要了解正则表达式的基本情况，请参考Java教程[Tutorials 08]。java.util.regex包提供了P...

《Java安全编码标准》一2.8　IDS07-J不要向Runtime.exec()?方法传递非受信、未净化的数据

2.8　IDS07-J不要向Runtime.exec()?方法传递非受信、未净化的数据外部程序通常被系统调用来完成某种需要的功能。这是一种重用的形式，也被认为是一种简单基于组件的软件工程方法。在应用没有净化非受信的输入并且在执行外部程序时使用这种数据，就会导致产生命令和参数注入漏洞。每一个Java...

《Java安全编码标准》一第 2 章输入验证和数据净化（IDS）

第 2 章输入验证和数据净化（IDS）规则风险评估概要

共有9条

< 1 >

跳转至： GO

更新时间 2023-06-06 17:24:33

本页面内关键词为智能算法引擎基于机器学习所生成，如有任何问题，可在页面下方点击"联系我们"与我们沟通。

产品推荐

{"optioninfo":{"dynamic":"ture","static":"true"},"simplifiedDisplay":"newEdition","newCard":[{"ifIcon":"img","link":"https://img.alicdn.com/tfs/TB1XY8hGYr1gK0jSZFDXXb9yVXa-1740-328.png","icon":"","iconImg":"https://img.alicdn.com/tfs/TB1iJox2Br0gK0jSZFnXXbRRXXa-200-200.png","contentLink":"https://www.aliyun.com/product/arms","title":"应用实时监控服务 ARMS","des":"应用实时监控服务ARMS 包含前端监控，应用监控、云拨测等模块，覆盖小程序、APP、网站等客户端及ECS、Serverless、容器等环境，为分布式、微服务应用提供端到端性能监控与全链路追踪诊断， 让运维监控更加高效便捷。","link1":"https://common-buy.aliyun.com/?spm=5176.26849858.J_5253785160.3.3887564cBbVoUd&commodityCode=arms_serverless_public_cn","btn1":"立即开通（每月50GB额度）","link2":"https://common-buy.aliyun.com/?spm=5176.8140086.1280672.buy11.30f2bb91uujI1A&commodityCode=arms_app_bag#/buy","btn2":"资源包购买（旧版计费）","btn3":"帮助文档","link3":"https://help.aliyun.com/zh/arms/application-monitoring/getting-started/overview?spm=a2c4g.11186623.0.0.502edf6bVmoHkw","infoGroup":[{"infoName":"最佳实践","infoContent":{"firstContentLink":"https://www.aliyun.com/activity/middleware/ObservabilityConference2022?spm=5176.26849857.J_5253785160.2.1f4415e9ite0CU","firstContentName":"新老用户限时钜惠","lastContentLink":"https://www.aliyun.com/activity/middleware/observability","lastContentName":"最新实践 & 公开课"}},{"infoName":"相关推荐","infoContent":{"firstContentLink":"https://www.aliyun.com/activity/middleware/Application_monitoring?spm=5176.8140086.J_4084816840.3.1db8be45A6RecL","firstContentName":"应用监控-Java监控","lastContentName":"前端监控-Web应用监控","lastContentLink":"https://www.aliyun.com/activity/middleware/web_monitoring?spm=5176.26849857.J_9938243310.4.640115e9rV41KE"}},{"infoName":"产品入门","infoContent":{"firstContentName":"快速接入","lastContentName":"计费说明","firstContentLink":"https://help.aliyun.com/zh/arms/application-monitoring/getting-started/monitor-java-applications-1/?spm=a2c4g.11186623.0.0.36badf6bscAkU3","lastContentLink":"https://help.aliyun.com/zh/arms/application-monitoring/product-overview/billing-description?spm=a2c4g.11186623.0.0.41ba1a08NHoPA3"}},{"infoName":"相关推荐","infoContent":{"firstContentName":" 云拨测-网络测速","firstContentLink":"https://www.aliyun.com/activity/middleware/website/performance/test?spm=5176.20960838.0.0.6d33305emfVIyC","lastContentLink":"","lastContentName":""}}]}],"card":[],"search":[],"infoCard":[{"bannerUrl":"https://img.alicdn.com/tfs/TB1Xf81a3gP7K4jSZFqXXamhVXa-5169-974.jpg","bannerTitle":"mPaaS 小程序","bannerContent":"源自于支付宝小程序框架，亿级线上业务体量的锤炼，安全性媲美支付宝原生能力。<br>不仅面向自有 App 投放小程序，更可快速构建打包，覆盖支付宝、淘宝、钉钉等应用。","liveButtonName":"查看详情","liveButtonLink":"https://www.aliyun.com/product/mobilepaas/mpaas-miniprogram","contentTitle":"提供即开即用的端上体验","homePageLink":"https://common-buy.aliyun.com/?spm=5176.14673561.J_8751524360.2.56702709BussF3&commodityCode=mpaas_beta#/open","homePageName":"免费试用","linkGroup":[{"linkContent":"发布包大小极致优化，节省流量和存储。"},{"linkContent":"服务迭代不再受发版限制，快速发布，快速迭代。"},{"linkContent":"业务开发效率更加优秀，一次开发，多端运行。"}]}],"title":{"mainTitle":"应用实时监控服务ARMS","subtitle":"","linkUrl":"","btnText":"查看详情"},"visual":{"topbg":"https://img.alicdn.com/tfs/TB1bQuBIYH1gK0jSZFwXXc7aXXa-3840-740.gif","icon":"","textColor":"dark"},"dataList":[{"summary":"啦啦啦","author":"wuwu","linksUrl":"#"}],"sceneCard":[],"txt":[]}

{"$env":{"JSON":{}},"$page":{"env":"production"},"$context":{"optioninfo":{"dynamic":"ture","static":"true"},"simplifiedDisplay":"newEdition","newCard":[{"ifIcon":"img","link":"https://img.alicdn.com/tfs/TB1XY8hGYr1gK0jSZFDXXb9yVXa-1740-328.png","icon":"","iconImg":"https://img.alicdn.com/tfs/TB1iJox2Br0gK0jSZFnXXbRRXXa-200-200.png","contentLink":"https://www.aliyun.com/product/arms","title":"应用实时监控服务 ARMS","des":"应用实时监控服务ARMS 包含前端监控，应用监控、云拨测等模块，覆盖小程序、APP、网站等客户端及ECS、Serverless、容器等环境，为分布式、微服务应用提供端到端性能监控与全链路追踪诊断， 让运维监控更加高效便捷。","link1":"https://common-buy.aliyun.com/?spm=5176.26849858.J_5253785160.3.3887564cBbVoUd&commodityCode=arms_serverless_public_cn","btn1":"立即开通（每月50GB额度）","link2":"https://common-buy.aliyun.com/?spm=5176.8140086.1280672.buy11.30f2bb91uujI1A&commodityCode=arms_app_bag#/buy","btn2":"资源包购买（旧版计费）","btn3":"帮助文档","link3":"https://help.aliyun.com/zh/arms/application-monitoring/getting-started/overview?spm=a2c4g.11186623.0.0.502edf6bVmoHkw","infoGroup":[{"infoName":"最佳实践","infoContent":{"firstContentLink":"https://www.aliyun.com/activity/middleware/ObservabilityConference2022?spm=5176.26849857.J_5253785160.2.1f4415e9ite0CU","firstContentName":"新老用户限时钜惠","lastContentLink":"https://www.aliyun.com/activity/middleware/observability","lastContentName":"最新实践 & 公开课"}},{"infoName":"相关推荐","infoContent":{"firstContentLink":"https://www.aliyun.com/activity/middleware/Application_monitoring?spm=5176.8140086.J_4084816840.3.1db8be45A6RecL","firstContentName":"应用监控-Java监控","lastContentName":"前端监控-Web应用监控","lastContentLink":"https://www.aliyun.com/activity/middleware/web_monitoring?spm=5176.26849857.J_9938243310.4.640115e9rV41KE"}},{"infoName":"产品入门","infoContent":{"firstContentName":"快速接入","lastContentName":"计费说明","firstContentLink":"https://help.aliyun.com/zh/arms/application-monitoring/getting-started/monitor-java-applications-1/?spm=a2c4g.11186623.0.0.36badf6bscAkU3","lastContentLink":"https://help.aliyun.com/zh/arms/application-monitoring/product-overview/billing-description?spm=a2c4g.11186623.0.0.41ba1a08NHoPA3"}},{"infoName":"相关推荐","infoContent":{"firstContentName":" 云拨测-网络测速","firstContentLink":"https://www.aliyun.com/activity/middleware/website/performance/test?spm=5176.20960838.0.0.6d33305emfVIyC","lastContentLink":"","lastContentName":""}}]}],"card":[],"search":[],"infoCard":[{"bannerUrl":"https://img.alicdn.com/tfs/TB1Xf81a3gP7K4jSZFqXXamhVXa-5169-974.jpg","bannerTitle":"mPaaS 小程序","bannerContent":"源自于支付宝小程序框架，亿级线上业务体量的锤炼，安全性媲美支付宝原生能力。<br>不仅面向自有 App 投放小程序，更可快速构建打包，覆盖支付宝、淘宝、钉钉等应用。","liveButtonName":"查看详情","liveButtonLink":"https://www.aliyun.com/product/mobilepaas/mpaas-miniprogram","contentTitle":"提供即开即用的端上体验","homePageLink":"https://common-buy.aliyun.com/?spm=5176.14673561.J_8751524360.2.56702709BussF3&commodityCode=mpaas_beta#/open","homePageName":"免费试用","linkGroup":[{"linkContent":"发布包大小极致优化，节省流量和存储。"},{"linkContent":"服务迭代不再受发版限制，快速发布，快速迭代。"},{"linkContent":"业务开发效率更加优秀，一次开发，多端运行。"}]}],"title":{"mainTitle":"应用实时监控服务ARMS","subtitle":"","linkUrl":"","btnText":"查看详情"},"visual":{"topbg":"https://img.alicdn.com/tfs/TB1bQuBIYH1gK0jSZFwXXc7aXXa-3840-740.gif","icon":"","textColor":"dark"},"dataList":[{"summary":"啦啦啦","author":"wuwu","linksUrl":"#"}],"sceneCard":[],"txt":[]}}