SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 87

changes.mady.by.user David Svoboda

Saved on

compared with

New Version 88

changes.mady.by.user David Svoboda

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

When any method from the following table is invoked on a Class, ClassLoader or Thread object, a comparison is run between the method's immediate caller's class loader and that of the object on which the method is invoked. ([[SCG 2007]])

APIs capable of bypassing SecurityManager's checks

Class.newInstance()

Class.getClassLoader()

Class.getClasses()

Class.getField(s)

Class.getMethod(s)

Class.getConstructor(s)

Class.getDeclaredClasses()

Class.getDeclaredField(s)

Class.getDeclaredMethod(s)

Class.getDeclaredConstructor(s)

ClassLoader.getParent()

ClassLoader.getSystemClassLoader()

Thread.getContextClassLoader()

...