Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

A nested class is any class whose declaration occurs within the body of another class or interface [JLS 2005]. The use of a nested class is error-prone unless the semantics are well understood. A common notion is that only the nested class may access the contents of the outer class. Not only does the nested class have access to the private fields of the outer class, the same fields can be accessed by any other class within the package when the nested class is declared public or if it contains public methods or constructors. As a result the nested class must not expose the private members of the outer class to external classes or packages.

According to the Java Language Specification , §8.3, "Field Declarations" [JLS 2005]:

Note that a private field of a superclass might be accessible to a subclass (for example, if both classes are members of the same class). Nevertheless, a private field is never inherited by a subclass.

...

MITRE CWE

CWE-492. Use of Inner Class Containing Sensitive Data

Bibliography

[JLS 2005]

§8.1.3, Inner Classes and Enclosing Instances

 

§8.3, Field Declarations

[Long 2005]

§2.3, Inner Classes

[McGraw 1999]

Securing Java, Getting Down to Business with Mobile Code

 

...

      Rule 05: Object Orientation (OBJ)Image Added