CWE
Home > CWE List > CWE-169 Individual Dictionary Definition (Draft 9)   View the CWE List

CWE-169 Individual Dictionary Definition (Draft 9)

Technology-Specific Special Elements
Category ID
Status: Draft

169 (Category)

Description

Summary

Weaknesses in this category are related to improper handling of special elements within particular technologies.

Potential Mitigations

Developers should anticipate that technology-specific special elements will be injected/removed/manipulated in the input vectors of their software system. Use an appropriate combination of black lists and white lists to ensure only valid, expected and appropriate input is processed by the system.

Context Notes

Note that special elements problems can arise from designs or languages that (1) do not separate "code" from "data" or (2) mix meta-information with information.

Relationships
NatureTypeIDName
ChildOfWeakness ClassWeakness ClassWeakness Class138Failure to Sanitize Special Elements
ParentOfWeakness BaseWeakness BaseWeakness Base170Improper Null Termination
Source Taxonomies

PLOVER - Technology-Specific Special Elements

Applicable Platforms

All

Page Last Updated: April 21, 2008