...
CWE-375, Returning a mutable object Mutable Object to an untrusted callerUntrusted Caller |
Bibliography
[API 2006] | |
Item 39, "Make Defensive Copies When Needed" | |
Section 3.2, "Publication and Escape: Allowing Internal Mutable State to Escape" | |
Section 9.4, "Private Object State and Object Immutability" | |
|
...