Page Information

Title:	IDS51-J. Properly encode or escape output
Author:	Dhruv Mohindra	Oct 06, 2009
Last Changed by:	Michal Rozenau	Jan 10, 2023
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/7jdGBQ
Export As:	Word · PDF

Android (1)     Page: Applicable in Principle to Android (Java Rules/Recomendations)

SEI CERT Oracle Coding Standard for Java (1)     Page: IDS50-J. Use conservative file naming conventions

Parent Page     Page: Rec. 00. Input Validation and Data Sanitization (IDS)

• security
• ids
• cwe-79
• maybe-normative
• recommendation
• 1security
• cwe-116

Time	Editor
Jan 10, 2023 06:20	Michal Rozenau	View Changes
Parasoft Jtest 2022.2
Jan 10, 2023 06:19	Michal Rozenau	View Changes
Parasoft Jtest 2022.2
Nov 08, 2018 14:18	Derek Leung	View Changes
Nov 08, 2018 12:28	Derek Leung	View Changes
update base64 url encoding example
Nov 07, 2018 12:58	David Svoboda
wordsmithing

External Links (8)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS…
    https://www.ietf.org/rfc/rfc1738.txt
    www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prev…
    www.owasp.org/index.php/How_to_add_validation_logic_to_Http…
    issues.apache.org/jira/browse/GERONIMO-1474

SEI CERT Oracle Coding Standard for Java (7)     Page: Java Coding Guidelines     Page: Rec. AA. References     Page: IDS01-J. Normalize strings before validating them     Page: The Checker Framework_V     Page: Parasoft     Page: The Checker Framework     Page: Parasoft_V