...
| Wiki Markup |
|---|
\[[JNI 06|AA. Java References#JNI 06]\] \[[SCG 07|AA. Java References#SCG 07]\] Guideline 3-3 Define wrappers around native methods \[[Liang 97|AA. Java References#Liang 97]\] \[[Macgregor 98|AA. Java References#Macgregor 98]\] Section 2.2.3, Interfaces and Architectures \[[MITRE 09|AA. Java References#MITRE 09]\] [CWE ID 111|http://cwe.mitre.org/data/definitions/111.html] "Direct Use of Unsafe JNI" |
...
SEC07SEC17-J. Declare classes that derive from a sensitive class or implement a sensitive interface finalCreate and sign a SignedObject before creating a SealedObject 02. Platform Security (SEC) SEC02SEC19-J. Guard doPrivileged blocks against untrusted invocationsDo not rely on the default automatic signature verification provided by URLClassLoader and java.util.jar