示例

public class TaintDemoClass { private String input; public TaintDemoClass(){ input = getInput(); sensitiveMethod(input); } private String getInput(){ // get input from user... return aString; } private String sanitizeInput(String s) { // clean input... return cleanString; } private void sensitiveMethod(String s) { // use input... } }

解决方案

为了避免在敏感方法中的不受控输入可能产生的有害影响，请始终通过无害处理方法来发送此输入。

public class TaintDemoClass { private String input; public TaintDemoClass() { input = getInput(); String cleanInput = sanitizeInput(input); sensitiveMethod(cleanInput); } private void getInput(){ // get input from user... return aString; } private String sanitizeInput(String s) { // clean input... return cleanString; } private void sensitiveMethod(String aString) { // use input... } }