Struts: Validator Turned Off - Revision history

KirstenS at 22:56, 7 April 2009

2009-04-07T22:56:40Z

KirstenS at 01:16, 18 February 2009

2009-02-18T01:16:28Z

KirstenS at 00:40, 6 November 2008

2008-11-06T00:40:22Z

KirstenS at 00:17, 1 October 2008

2008-10-01T00:17:25Z

Weilin Zhong: Contents provided by Fortify.

2006-07-24T18:24:24Z

Contents provided by Fortify.

Weilin Zhong at 19:39, 16 June 2006

2006-06-16T19:39:20Z

New page

{{Template:Vulnerability}}

==Description==

==Examples ==

==Related Threats==

==Related Attacks==

==Related Vulnerabilities==

==Related Countermeasures==

==Categories==

{{Template:Stub}}

[[Category:Input Validation Vulnerability]]

[[Category:Struts]]

← Older revision		Revision as of 22:56, 7 April 2009
Line 3:		Line 3:
	#REDIRECT [[Improper Data Validation]]		#REDIRECT [[Improper Data Validation]]

−
−	~~__TOC__~~
−
−	~~[[ASDR Table of Contents]]~~

@@ Line 1: / Line 1: @@
-{{Template:Vulnerability}}
+{{template:CandidateForDeletion}}
-{{Template:Fortify}}
 __TOC__
@@ Line 8: / Line 10: @@
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
 ==Description==
@@ Line 69: / Line 68: @@
 __NOTOC__

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
-[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
+__TOC__
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
-[[ASDR_TOC_Vulnerabilities|Vulnerabilities Table of Contents]]
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
@@ Line 77: / Line 77: @@
 [[Category:Code Snippet]]
 [[Category:Implementation]]

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
-==Abstract==
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
 ==Description==
 An action form mapping should never disable validation. Disabling validation disables the Struts Validator as well as any custom validation logic performed by the form.
 ==Examples ==
 An action form mapping that disables validation.
@@ Line 26: / Line 39: @@
 Disabling validation exposes this action to numerous types of attacks. Unchecked input is the root cause of vulnerabilities like cross-site scripting, process control, and SQL injection. Although J2EE applications are not generally susceptible to memory corruption attacks, if a J2EE application interfaces with native code that does not perform array bounds checking, an attacker may be able to use an input validation mistake in the J2EE application to launch a buffer overflow attack.
-==Related Vulnerabilities==
+==Related [[Attacks]]==
-[[:Category:Input Validation]]
+__NOTOC__
 [[Category:Input Validation Vulnerability]]
 [[Category:Struts]]