Labelled content

DRD25. Use constant-time encryption (Android)

DRD27-J. For OAuth, use an explicit intent method to deliver access tokens (Android)

Avoid having unreachable code (Android)

DRD23. Do not use world readable or writeable to share files between apps (Android)

Copy of Rule Template (Android)

Rule Template (Android)

MSC10-J. Do not use OAuth 2.0 implicit grant (unmodified) for authentication (SEI CERT Oracle Coding Standard for Java)

DRD26-J. For OAuth, use a secure Android method to deliver access tokens (Android)

MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to]. (SEI CERT Oracle Coding Standard for Java)

DRD25. To request user permission for OAuth, identify relying party and its permissions scope (Android)