I am creating a File object in Java using File(String pathName), where pathName is the absolute path to the file.
While this works perfectly fine from functionality point of view, but it frequently ends up as an static analysis defect.
Is there any specific reason why it is suggested to use the constructor File(File parent, String child) over the File(String pathName)?
Why it is not suggested to pass hardcoded absolute path name to File object constructor File(String)
6.2k views Asked by AudioBubble At
2
There are 2 answers
Related Questions in JAVA
- I need the BIRT.war that is compatible with Java 17 and Tomcat 10
- Creating global Class holder
- No method found for class java.lang.String in Kafka
- Issue edit a jtable with a pictures
- getting error when trying to launch kotlin jar file that use supabase "java.lang.NoClassDefFoundError"
- Does the && (logical AND) operator have a higher precedence than || (logical OR) operator in Java?
- Mixed color rendering in a JTable
- HTTPS configuration in Spring Boot, server returning timeout
- How to use Layout to create textfields which dont increase in size?
- Function for making the code wait in javafx
- How to create beans of the same class for multiple template parameters in Spring
- How could you print a specific String from an array with the values of an array from a double array on the same line, using iteration to print all?
- org.telegram.telegrambots.meta.exceptions.TelegramApiException: Bot token and username can't be empty
- Accessing Secret Variables in Classic Pipelines through Java app in Azure DevOps
- Postgres && statement Error in Mybatis Mapper?
Related Questions in FILE
- Helpt with reading files
- Why can't I use the file pointer after the first read attempt fails?
- Can't read the file using std::wifstream C++
- How can the scanner reread the entire file after it has already executed hasNextLine once?
- What is 'Invalid Load Key, '\x00'
- php $_FILE variable undefined index
- Data loaded from the file is not returned in the correct order
- File splitting and encryption
- Optimizing an s5cmd command that uses awk to generate a text file
- segmentation fault while reading in text file ( c++ )
- File.OpenText is adding C:\ to the front which is an error
- UTF-8 issue with excel
- How to upload files to MediaWiki APIs in Rust?
- No such file or directory: '/tmp/tmp_ejr26m6.upload.mp3' in Django
- Problems accessing zip files on the react front end from express backend
Related Questions in CONSTRUCTOR
- How to solve compiler error: no matching function for call to 'dmhFS::dmhFS()' in my case?
- Documentation comments for record types with primary constructors in C#
- Is it allowed to pass "this" of derived class to constructor of base class?
- Is there a way to prepend the namespace to the constructor in JSDoc? - e.g. new foo.Bar()
- Initializing member class with referenced inputs within parent class constructor
- Ways of Passing Parameters to the Constructor
- Why parent no-arg constructor is called?
- How to implement data structures correctly in C (mainly about pointers), as someone with a background in Java. E.g. creating a constructor correctly?
- Using service in the constructor of a MODEL (angular)
- Inheritance - is it possible to 'force' variable values relative to the derived class?
- Is it legal to zero empty C++ classes in the constructor and inherit from them?
- Conflicting declaration when passing file stream to constructor
- Explicitly specialize templated constructor with zero arguments
- If a subclass has no constructor, and neither does the superclass, then why can I construct an instance of the subclass?
- E1776 function "student::operator=(const student &)" (declared implicitly) cannot be referenced -- it is a deleted function
Related Questions in STATIC-ANALYSIS
- Ansible role analysis with Checkov - facts evaluation?
- Flutter SonarQube: "The main branch has no lines of code."
- the expressionType and includePath of CDT parser
- Adding entry to program header table
- Static checker that number of arguments to python logging matches number of placeholders
- Why am I getting this error when using dataflow in Codeql
- How to disallow exception to curly_braces_in_flow_control_structures linter rule in dart?
- Security scan flagged local variable for heap inspection in C Function
- Is it possible to use Eclipse JDT static analysis for null annotations when compiling from the command line?
- Remove directory from sonar analyzer
- Sonar qube issue in using aes-256-cbc algoritm, stating Make sure that encrypting data is safe here
- Programming language/library that uses dataflow analysis to fetch only required data from the database
- Export comments from Fortify Software Security Center
- Changing lint configuration based on Cargo profile
- Can I reproduce eslint's "prefer-object-spread" rule using ast-grep?
Related Questions in HARDCODED
- How to elegantly check null check for java method parameter?
- Where is the best place to define a big list of hard coded key-value pairs in Java?
- HARDCODED_CREDENTIALS warning with OS environment variables file when using Coverity Scan
- How to convert script into a hard coded version of it in Tcl language?
- How to safely hardcode an authentication token within an application code - Java
- how to return an array as many times as you need
- How can I avoid sending hardcoded values to mySQL database
- How to avoid a hardcoded IP address in React JS
- Avoid hardcoding in select clause
- Can hard-code address and manually assign it to a pointer?
- Protecting config file of web hosting
- Function in pytest file works only with hard coded values
- Finding hardcoded string in React Native (using WebStorm)
- How to reduce the number of if-else statements (e.g. avoid hardcoding values)?
- TemplateSyntaxError at /music/ Invalid block tag on line 6: 'path', expected 'empty' or 'endfor'. Did you forget to register or load this tag?
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Popular Tags
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
As a general rule of thumb, hardcoding absolute paths makes your program less flexible. Consider a configuration file located at
/usr/share/myapp/myapp.conf- what if the end user wants to install your application somewhere else than/usr/share? Using such an absolute path will break the application.And as always, no general statement is true 100% of the time. If it makes absolutely no sense to have this file in any other location, just waive/suppress the warning in you static analysis tool.