3
votes
2answers
1k views

How to check for null byte injection in Java webapp

Looks like Null Byte Injection is possible in Java apps. see: Is null-byte injection possible in Java filenames? So how does one protect against it? Inspect all the bytes of the filename for a 0 ...