Tech Tips and Tricks
Using JNDI javax.naming.Context context = new javax.naming.InitialContext(); javax.sql.DataSource ds = (javax.sql.DataSource) context.lookup(“java:comp/env/jdbc/XXXJNDINAMEXXX”); java.sql.Connection con = ds.getConnection();
CWE-20:Improper Input Validation CWE-116:Improper Encoding or Escaping of Output CWE-89:Failure to Preserve SQL Query Structure CWE-79:Failure to Preserve Web Page Structure CWE-78:Failure to Preserve OS Command Structure CWE-319:Cleartext Transmission of Sensitive Information CWE-352:Cross-Site Request Forgery CWE-362:Race Condition CWE-209:Error Message Information Continue reading TOP 25 Most Dangerous Programming Errors