SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 4

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 5

changes.mady.by.user Carol J. Lallier

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Content by Label
showLabelsfalse
max99
spaces@self
sorttitle
showSpacefalse
labels+1security,-void

01. Limit the lifetime of sensitive data
02. Do not store unencrypted sensitive information on the client side
03. Provide sensitive mutable classes with unmodifiable wrappers
04. Ensure that security-sensitive methods are called with validated arguments
05. Prevent arbitrary file upload
06. Properly encode or escape output
07. Prevent code injection
08. Prevent XPath Injection
09. Prevent LDAP injection
10. Do not use the clone method to copy untrusted method parameters
11. Do not use Object.equals() to compare cryptographic keys
12. Do not use insecure or weak cryptographic algorithms
13. Store passwords using a hash function
14. Ensure that SecureRandom is properly seeded
15. Do not rely on methods that can be overridden by untrusted code
16. Avoid granting excess privileges
17. Minimize privileged code
18. Do not expose methods that use reduced-security checks to untrusted code
19. Define custom security permissions for fine-grained security
20. Create a secure sandbox using a security manager
21. Do not let untrusted code misuse privileges of callback methods