Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Related Guidelines

MITRE CWE

CWE ID -374, "Passing Mutable Objects to an Untrusted Method"

 

CWE ID -375, "Returning a Mutable Object to an Untrusted Caller"

Secure Coding Guidelines for the Java Programming Language, Version 3.0

Guideline 2-3 Support copy functionality for a mutable class

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="bf97750498b3c8e7-755f8b76-47354b36-9f2d8e81-5263aaaf8fd5cbf30952fdd0"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

[method clone()

http://java.sun.com/javase/6/docs/api/java/lang/Object.html#clone()]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="d5ad498c2b458696-26cef7d4-4b3849e0-865a85d2-77568974428c8c7dd580e3b7"><ac:plain-text-body><![CDATA[

[[Bloch 2008

AA. Bibliography#Bloch 08]]

Item 39: Make defensive copies when needed and Item 11: Override clone judiciously

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="efb3efa66eed2e0a-20c83acc-4e0244e0-be4ea57d-081f25575e4604c0fe128f09"><ac:plain-text-body><![CDATA[

[[Security 2006

AA. Bibliography#Security 06]]

]]></ac:plain-text-body></ac:structured-macro>

...