A nested class is any class whose declaration occurs within the body of another class or interface \[ [JLS 2005|AA. References#JLS 05]\]. The use of a nested class is error-prone unless the semantics are well understood. A common notion is that only the nested class may access the contents of the outer class. Not only does the nested class have access to the private fields of the outer class, the same fields can be accessed by any other class within the package when the nested class is declared public or if it contains public methods or constructors. As a result the nested class must not expose the private members of the outer class to external classes or packages. unmigrated-wiki-markup Wiki Markup
According to the _Java Language Specification_ , [§8 , §8.3, "Field Declarations"|http://java.sun.com/docs/books/jls/third_edition/html/classes.html#8.3] \[ [JLS 2005|AA. References#JLS 05]\]:
Note that a private field of a superclass might be accessible to a subclass (for example, if both classes are members of the same class). Nevertheless, a private field is never inherited by a subclass.
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
OBJ08-J | medium | probable | medium | P8 | L2 |
Automated Detection
Automated detection of nonprivate inner classes that define nonprivate members and constructors that leak private data from the outer class is straightforward.
...
Bibliography
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="ec24bd05-8d73-4eca-91fb-65c6a2f570c9"><ac:plain-text-body><![CDATA [ [[JLS 2005AA. References#JLS 05]] | http://java.sun.com/docs/books/jls/third_edition/html/classes.html#8.1.3] ]]></ac:plain-text-body></ac:structured-macro> | |
| §8.3, Field Declarations<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f66f4b1f-53a5-45dd-924e-fe9c248db9ba"><ac:plain-text-body><![CDATA[ | |
[ [Long 2005AA. References#Long 05]] | §2.3, Inner Classes ]]></ac:plain-text-body></ac:structured-macro><ac:structured | |
-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="2aa23646-4aac-4499-bc12-af7227b356ea"><ac:plain-text-body><! [CDATA[ [[McGraw 1999AA. References#McGraw 99]] | Securing Java, Getting Down to Business with Mobile Code ]]></ac:plain-text-body></ac:structured-macro> |
...