Page Information

Title:	SEC52-J. Do not expose methods that use reduced-security checks to untrusted code
Author:	Dhruv Mohindra	Jul 05, 2008
Last Changed by:	Will Snavely	Nov 16, 2017
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/KjZGBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (1)     Page: SEC51-J. Minimize privileged code

Android (1)     Page: Applicability Test

Parent Page     Page: Rec. 15. Platform Security (SEC)

• security
• review-dms
• review-dm
• review-dfs
• reviewed-fwl
• sec
• cwe-732
• android-inapplicable
• recommendation
• 1security
• analyzable

Time	Editor
Nov 16, 2017 14:43	Will Snavely	View Changes
Apr 07, 2015 12:01	Will Snavely	View Changes
Mar 30, 2015 15:54	Will Snavely	View Changes
Mar 05, 2015 07:29	Sandy Shrum	View Changes
Oct 20, 2014 10:18	David Svoboda

External Links (8)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    www.oracle.com/technetwork/topics/security/alert-cve-2013-0…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    immunityproducts.blogspot.com.ar/2012/08/java-0day-analysis…
    www.kb.cert.org/vuls/id/636312
    https://www.cert.org/blogs/certcc/2013/01/anatomy_of_java_e…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    docs.oracle.com/javase/7/docs/api/java/lang/ClassLoader.htm…

SEI CERT Oracle Coding Standard for Java (5)     Page: Java Coding Guidelines     Page: Rec. AA. References     Page: SEC00-J. Do not allow privileged blocks to leak sensitive information across a trust boundary     Page: SEC03-J. Do not load trusted classes after allowing untrusted code to load arbitrary classes     Page: SEC05-J. Do not use reflection to increase accessibility of classes, methods, or fields