Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: added CWE reference

...

Wiki Markup
\[[JLS 05|AA. Java References#JLS 05]\] [Section 8.1.3, Inner Classes and Enclosing Instances|http://java.sun.com/docs/books/jls/third_edition/html/classes.html#8.1.3]
\[[McGraw 00|AA. Java References#McGraw 00]\]
\[[Long 05|AA. Java References#Long 05]\] Section 2.3, Inner Classes
\[[MITRE 09|AA. Java References#MITRE 09]\] [CWE ID 492|http://cwe.mitre.org/data/definitions/492.html] "Use of Inner Class Containing Sensitive Data"

...

SCP01-J. When developing Java clients (applets, mobile) assume that all scope can be overridden or modifiedDeclare sensitive methods, fields and classes to be private and final      03. Scope (SCP)      SCP03-J. Do not reuse names