Labelled content

MSC25-C. Do not use insecure or weak cryptographic algorithms (SEI CERT C Coding Standard)

MSC10-J. Do not use OAuth 2.0 implicit grant (unmodified) for authentication (SEI CERT Oracle Coding Standard for Java)

DRD26-J. For OAuth, use a secure Android method to deliver access tokens (Android)

MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to]. (SEI CERT Oracle Coding Standard for Java)

DRD25. To request user permission for OAuth, identify relying party and its permissions scope (Android)

DRD24. Do not bundle OAuth security-related protocol logic or sensitive data into a relying party's app (Android)

DRD23-J. Do not use loopback when handling sensitive data (Android)

DRD22. Do not cache sensitive information (Android)

OBJ12-J. Respect object-based annotations (SEI CERT Oracle Coding Standard for Java)

EXP07-J. Prevent loss of useful data due to weak references (SEI CERT Oracle Coding Standard for Java)