...
CWE ID 499, "Serializable Class Containing Sensitive Data" | |
| CWE ID 502, "Deserialization of Untrusted Data" SCG 2009 |
Secure Coding Guidelines for the Java Programming Language, Version 3.0 | Guideline 5-2 Guard sensitive data during serialization |
...
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="deb743e55cbcd9ee-fe8c3616-458e44bd-a67f857c-f202cb85f11f27a330f9f88d"><ac:plain-text-body><![CDATA[ | [[Bloch 2005 | AA. Bibliography#Bloch 05]] | Puzzle 83: Dyslexic Monotheism | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="8fcb7ed3f7e5aaf1-0e47fda9-473a4aa0-992db8f4-e0931b888c33226d3e9d3769"><ac:plain-text-body><![CDATA[ | [[Bloch 2001 | AA. Bibliography#Bloch 01]] | Item 1: Enforce the singleton property with a private constructor | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="6da24ec6ef6e9ab7-812d0fca-47544e7f-82a79402-48b64683699abf1f6db68569"><ac:plain-text-body><![CDATA[ | [[Greanier 2000 | AA. Bibliography#Greanier 00]] | [Discover the secrets of the Java Serialization API | http://java.sun.com/developer/technicalArticles/Programming/serialization/] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ed9392e7b1f7faea-a9094dd1-45344603-b1a3b381-6e3aa7a94edfdc4ea56d4845"><ac:plain-text-body><![CDATA[ | [[Harold 1999 | AA. Bibliography#Harold 99]] |
| ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="31d6c16c2760ac6d-8c571d76-43da4638-8c3aa0f2-fdf8d20f03be1ecb8d65e16e"><ac:plain-text-body><![CDATA[ | [[JLS 2005 | AA. Bibliography#JLS 05]] | [Transient modifier | http://java.sun.com/docs/books/jls/third_edition/html/classes.html#37020] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e8fa4373689ab399-b8174ed1-4df84b9e-a5dda65c-b94777fa369d1ea811804d27"><ac:plain-text-body><![CDATA[ | [[Long 2005 | AA. Bibliography#Long 05]] | Section 2.4, Serialization | ]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7d3a80f1712ab4ea-d5516c36-48084b64-b7cbb15f-e1a024faf1af5dc5b5e7b55a"><ac:plain-text-body><![CDATA[ | [[Sun 2006 | AA. Bibliography#Sun 06]] | "Serialization specification: A.4 Preventing Serialization of Sensitive Data" | ]]></ac:plain-text-body></ac:structured-macro> |
...