The CERT Sun Microsystems Oracle Secure Coding Standard for Java includes rules and recommended practices for secure programming in the Java Platform Standard Edition 6 environment. This is a work-in-progress and we actively seek your feedback and involvement in making this effort a success. We thank and acknowledge all the contributors. 00. Introduction 01. Runtime Environment (ENV) 02. Platform Security (SEC) 03. Declarations and Initialization (DCL) 04. Expressions (EXP) 05. Scope (SCP) 06. Integers (INT) 07. Floating Point (FLP) 08. Object Orientation (OBJ) 09. Input Output (FIO) 10. Input Validation and Data Sanitization (IDS) 11. Concurrency (CON) 12. Methods (MET) 13. Exceptional Behavior (EXC) 14. Serialization (SER) 49. Miscellaneous (MSC) 99. The Void (VOID) AA. Java References BB. Definitions ZZ. General Comments CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office. Java is a trademark or registered trademark of Sun MicrosystemsOracle, Inc. in the US and other countries. |