Labelled content

EXP52-CPP. Do not rely on side effects in unevaluated operands (SEI CERT C++ Coding Standard)

IDS05-J. Use a safe subset of ASCII for file and path names (SEI CERT Oracle Coding Standard for Java)

FLP37-C. Do not use object representations to compare floating-point values (SEI CERT C Coding Standard)

IDS02-J. Canonicalize path names before validating them (SEI CERT Oracle Coding Standard for Java)

MSC10-J. Do not use OAuth 2.0 implicit grant (unmodified) for authentication (SEI CERT Oracle Coding Standard for Java)

DRD26-J. For OAuth, use a secure Android method to deliver access tokens (Android)

MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to]. (SEI CERT Oracle Coding Standard for Java)

DRD25. To request user permission for OAuth, identify relying party and its permissions scope (Android)

DRD24. Do not bundle OAuth security-related protocol logic or sensitive data into a relying party's app (Android)

IDS17-J. Prevent XML External Entity Attacks (SEI CERT Oracle Coding Standard for Java)