2010最危险的编程错误
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:0cm;line-height:15.75pt"><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">网络无处不在的今天，安全问题日益严峻，攻击事件层出不穷，应该说，软件系统中代码存在安全漏洞是主要的祸因之一。而这实际上反映了软件开发人员在编程的安全性方面缺乏必要的培训和常识。</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">由</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";color:black">CWS</span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">（美国国土安全部下属的软件保证项目）与</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";color:black">SANS</span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">（权威安全培训组织）联合编制的最危险的</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";color:black">25</span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">个编程错误，是软件开发人员非常好的快速学习资料。日前，两个机构发布了</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";color:black"><a href="http://cwe.mitre.org/top25/#Listing" target="_blank"><span style="color:#888888">2010</span><span lang="EN-US" style="font-family:宋体;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:#888888"><span lang="EN-US">年的编程错误列表</span></span></a></span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">。最新的</span><span lang="EN-US" style="font-size:10.5pt;
font-family:"Verdana","sans-serif";color:black">25</span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">个最危险的编程错误如下。</span><span lang="EN-US" style="font-size:10.5pt;
font-family:"Verdana","sans-serif";color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">1. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">跨站点脚本攻击</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(4)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">2. SQL</span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">注入</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(3)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">3. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">经典缓冲区溢出</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(1)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">4. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">跨站点请求伪造</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(7)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">5. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">不正确的访问控制（授权）</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">6. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">在安全决策中依赖不可信的输入</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">7. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">不正确地将路径名限制为受限路径</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">8. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">上传危险类型的文件不受限</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">9. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">操作系统命令中特殊因素的处理不正确（操作系统命令注入）</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(5)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">10. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">敏感信息未加密</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(6)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">11. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">使用硬编码凭据</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(21)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">12. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">以不正确的长度值访问缓冲区</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">13. PHP</span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">程序中</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">Include/Require</span><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">语句文件名控制不正确（</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">PHP</span><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">文件侵入）</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">14. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">数组下标验证不正确</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">15. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">异常条件检查不正确</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">16. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">错误消息泄露信息</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(9)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">17. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">整数溢出</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">18. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">缓冲区大小计算错误</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">19. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">关键函数缺乏身份验证</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">20. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">下载未经完整性检查的代码</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(15)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">21. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">对关键资源的错误权限分配</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(22)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">22. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">资源分配没有限制</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">23. URL</span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">重导向到不受信的资源</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">24. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">使用被破解或有风险的加密算法</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(20)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">25. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">存在竞争情况</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black">(Race condition)(8)</span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">其中后加括号有数字的，是该项错误去年的排名。显然，连续两年都入选的错误，千万不要再犯了。</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">另外，我们对比了</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"><a href="http://safe.csdn.net/n/20090113/337.html" target="_blank"><span lang="EN-US" style="font-family:宋体;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:#888888"><span lang="EN-US">去年前</span></span><span style="color:#888888">25</span><span lang="EN-US" style="font-family:宋体;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:#888888"><span lang="EN-US">名名单</span></span></a></span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">，列出今年落榜的错误如下，相信这些错误仍然具有相当的风险性。</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">2. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">不正确的编码或转义输出</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">10. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">限定缓冲区内操作失败</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">11. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">外部控制重要状态数据</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">12. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">外部控制文件名或路径</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">13. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">不可信搜索路径</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">14. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">控制代码生成错误（代码注入）</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">15. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">错误的资源关闭或发布</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">17. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">不正确的初始化</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">18. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">错误计算</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">19. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">可渗透防护</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">23. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">随机值的错误利用</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">24. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">滥用特权操作</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span lang="EN-US" style="font-size:10.5pt;font-family:
"Verdana","sans-serif";color:black">25. </span><span style="font-size:10.5pt;
mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;color:black">客户端执行服务器端安全</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"></span></p>
<p style="margin-top:12.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:
0cm;line-height:15.75pt"><span style="font-size:10.5pt;mso-ascii-font-family:
Verdana;mso-hansi-font-family:Verdana;color:black">推荐大家下载并仔细研读</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"><a href="http://cwe.mitre.org/top25/archive/2010/2010_cwe_sans_top25.pdf" target="_blank"><span lang="EN-US" style="font-family:宋体;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:#888888"><span lang="EN-US">完整的报告</span></span></a></span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">，有条件的可以组织开发团队和公司集中学习。这个报告相对枯燥了一些，如果你对哪些错误有比较直观的一看就懂的示例或者解释，欢迎在下面回复，或者</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Verdana","sans-serif";
color:black"><a href="mailto:liujiang@csdn.net" target="_blank"><span lang="EN-US" style="font-family:宋体;mso-ascii-font-family:Verdana;mso-hansi-font-family:Verdana;
color:#888888"><span lang="EN-US">与我们联系</span></span></a></span><span style="font-size:10.5pt;mso-ascii-font-family:Verdana;mso-hansi-font-family:
Verdana;color:black">。</span><span lang="EN-US" style="font-size:10.5pt;
font-family:"Verdana","sans-serif";color:black"></span></p>
页:
[1]