Weaknesses in this category are related to improper handling of
special elements within particular technologies.
Applicable Platforms
Languages
All
Potential Mitigations
Phase
Description
Developers should anticipate that technology-specific special elements
will be injected/removed/manipulated in the input vectors of their
software system. Use an appropriate combination of black lists and white
lists to ensure only valid, expected and appropriate input is processed
by the system.
Other Notes
Note that special elements problems can arise from designs or languages
that (1) do not separate "code" from "data" or (2) mix meta-information with
information.
Description
