...
Wiki Markup |
---|
\[[Mcgraw 1998|AA. Bibliography#Mcgraw 98]\] \[[MITRE 2009|AA. Bibliography#MITRE 09]\] [CWE ID 498|http://cwe.mitre.org/data/definitions/498.html] "Information Leak through Class Cloning", [CWE ID 491|http://cwe.mitre.org/data/definitions/491.html] "Public cloneable() Method Without Final (aka 'Object Hijack')" \[[Wheeler 2003|AA. Bibliography#Wheeler 03]\] 10.6. Java |
...
MSC04OBJ01-J. Do not use Object.equals() to compare cryptographic keys 49. Miscellaneous (MSC) MSC06-J. Avoid memory leaksassume that a final reference makes the referenced object immutable 04. Object Orientation (OBJ) OBJ03-J. Do not use public static non-final variables