Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This code will only catch exceptions intended by the programmer to be caught. A concurrency-based exception will not be caught by this code, and can therefore be managed by code more specifically designed to handle it.

Exceptions

EXC32-J-EX1: A secure application must also abide by EXC01-J. Do not allow exceptions to transmit sensitive information. In order to follow this rule, an application might find it necessary to catch all exceptions at some 'top' level in order to sanitize (or suppress) them. This is also summarized in this CWE.

Risk Assessment

Catching RuntimeException will trap several types of exceptions not intended to be caught. This prevents them from being handled properly.

...