codeql/java/ql/src/Frameworks/JavaEE/EJB/EjbFileIO.qhelp at main · github/codeql · GitHub

Repository navigation

35 lines (27 loc) · 755 Bytes

<!DOCTYPE qhelp PUBLIC

"-//Semmle//qhelp//EN"

"qhelp.dtd">

<qhelp>

The Enterprise JavaBeans 3.0 core specification, Section 21.1.2, states:

An enterprise bean must not use the <code>java.io</code> package to attempt to access files and

directories in the file system.

The file system APIs are not well-suited for business components to access data. Business components

should use a resource manager API, such as JDBC, to store data.

</blockquote>

</overview>

<li>

JSR-220 Enterprise JavaBeans 3.0 Final Release</a> (ejbcore),

Section 21.1.2 Programming Restrictions

</li>

</references>

</qhelp>