...
| Wiki Markup |
|---|
\[[Chan 99|AA. Java References#Chan 99]\] java.lang.reflect AccessibleObject \[[SCG 07|AA. Java References#SCG 07]\] Guideline 6-4 Be aware of standard APIs that perform Java language access checks against the immediate caller |
...
SEC04SEC05-J. Do not expose standard APIs that may bypass Security Manager checks use the immediate caller's class loader instance to untrusted code 02. Platform Security (SEC) SEC19SEC07-J. Do not rely on the default automatic signature verification provided by URLClassLoader and java.util.jarDeclare classes that derive from a sensitive class or implement a sensitive interface final