Files
codeql/java/ql/src/Frameworks/JavaEE/EJB/EjbFileIO.qhelp
2018-08-30 10:48:05 +01:00

36 lines
755 B
XML

<!DOCTYPE qhelp PUBLIC
"-//Semmle//qhelp//EN"
"qhelp.dtd">
<qhelp>
<overview>
<p>
The Enterprise JavaBeans 3.0 core specification, Section 21.1.2, states:
</p>
<blockquote>
<p>
An enterprise bean must not use the <code>java.io</code> package to attempt to access files and
directories in the file system.
</p>
<p>
The file system APIs are not well-suited for business components to access data. Business components
should use a resource manager API, such as JDBC, to store data.
</p>
</blockquote>
</overview>
<references>
<li>
<a href="http://jcp.org/aboutJava/communityprocess/final/jsr220/index.html">
JSR-220 Enterprise JavaBeans 3.0 Final Release</a> (ejbcore),
Section 21.1.2 Programming Restrictions
</li>
</references>
</qhelp>