SAP DYNAMIC PROGRAMMING SCRTY
Get Example source ABAP code based on a different SAP table
ARTICLE
Security Risks in Dynamic Programming
Most security problems encountered in ABAP programs are caused by incorrectly or carelessly used
If assuming that the developer of a program does so without malicious intent, dynamic programming techniques are uncritical in the former case. Here, information is specified dynamically, for instance, to make the programming of functions more compact than if they were programmed statically.
The latter case, on the other hand, is critical. If external input is specified dynamically in an ABAP statement without being checked or masked, damage can be incurred (whether unintentional or malicious). The damage can range from exceptions being raised, the absence of system resources (
The following sections provide examples of the most significant security risks encountered when using dynamic programming techniques together with external input:
The global principle in these sections of always checking and/or masking external input also applies in all cases not listed separately here, such as using a dynamic
Note