Page Information

Title:	FIO01-PL. Do not operate on files that can be modified by untrusted users
Author:	David Svoboda	Jun 22, 2012
Last Changed by:	Will Snavely	Nov 16, 2017
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/xVxMBQ
Export As:	Word · PDF

SEI CERT Perl Coding Standard (2)     Page: IDS00-PL. Canonicalize path names before validating them     Page: IDS01-PL. Use taint mode while being aware of its limitations

Parent Page     Page: Rec. 07. File Input and Output (FIO)

• recommendation
• fio

Time	Editor
Nov 16, 2017 14:45	Will Snavely	View Changes
Mar 31, 2015 18:28	Will Snavely	View Changes
Mar 31, 2015 18:08	Will Snavely	View Changes
Mar 26, 2015 20:56	Will Snavely	View Changes
Mar 26, 2015 19:04	Will Snavely

External Links (8)
    perldoc.perl.org/perlfunc.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.securecoding.cert.org/confluence/display/seccod…
    search.cpan.org/%7Erjbs/perl-5.16.0/ext/POSIX/lib/POSIX.pod
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    www.kb.cert.org/vuls/id/570952

SEI CERT C Coding Standard (2)     Page: FIO15-C. Ensure that file operations are performed in a secure directory     Home page: SEI CERT C Coding Standard

SEI CERT C++ Coding Standard (2)     Page: VOID FIO15-CPP. Ensure that file operations are performed in a secure directory     Home page: SEI CERT C++ Coding Standard

SEI CERT Perl Coding Standard (4)     Page: AA. Bibliography     Page: IDS00-PL. Canonicalize path names before validating them     Home page: SEI CERT Perl Coding Standard     Page: EXP30-PL. Do not use deprecated or obsolete functions or modules

SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java     Page: FIO00-J. Do not operate on files in shared directories