SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 136

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 137

changes.mady.by.user Carol J. Lallier

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Bibliography

[API 2013]Class ClassLoader
[Chan 1999]java.lang.reflect AccessibleObject
[Guillardoy 2012]Java 0-day Analysis (CVE-2012-4681)
[Long 2012]

SEC00-J. Do not allow privileged blocks to leak sensitive information across a trust boundary
SEC03-J. Do not load trusted classes after allowing untrusted code to load arbitrary classes
SEC05-J. Do not use reflection to increase accessibility of classes, methods, or fields

[Manion 2013]Anatomy of Java Exploits
[Oracle 2013]Oracle Security Alert for CVE-2013-0422

...