|
|
|
|
CWE-169 Individual Dictionary Definition (Draft 9)
Category ID
| Status: Draft 169 (Category) | | Description | Summary Weaknesses in this category are related to improper handling of special elements within
particular technologies. | | Potential Mitigations | Developers should anticipate that technology-specific special elements will be
injected/removed/manipulated in the input vectors of their software system. Use an appropriate
combination of black lists and white lists to ensure only valid, expected and appropriate
input is processed by the system. | | Context Notes | Note that special elements problems can arise from designs or languages that (1) do not
separate "code" from "data" or (2) mix meta-information with information. | | Relationships | | | Source Taxonomies | PLOVER - Technology-Specific Special Elements | | Applicable Platforms | All |
|