Page Information

Title:	The Checker Framework
Author:	David Svoboda	Oct 05, 2016
Last Changed by:	David Svoboda	Oct 14, 2024
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/4DdGBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (31)     Page: OBJ09-J. Compare classes and not class names     Page: IDS06-J. Exclude unsanitized user input from format strings     Page: IDS16-J. Prevent XML Injection     Page: IDS00-J. Prevent SQL injection     Page: IDS11-J. Perform any string modifications before validation     Page: IDS52-J. Prevent code injection     Page: IDS08-J. Sanitize untrusted data included in a regular expression     Page: LCK00-J. Use private final lock objects to synchronize classes that may interact with untrusted code     Page: FIO16-J. Canonicalize path names before validating them     Page: IDS04-J. Safely extract files from ZipInputStream     Page: MET56-J. Do not use Object.equals() to compare cryptographic keys     Page: IDS01-J. Normalize strings before validating them     Page: IDS51-J. Properly encode or escape output     Page: IDS07-J. Sanitize untrusted data passed to the Runtime.exec() method     Page: IDS50-J. Use conservative file naming conventions     Page: IDS55-J. Understand how escape characters are interpreted when strings are loaded     Page: LCK01-J. Do not synchronize on objects that may be reused     Page: IDS17-J. Prevent XML External Entity Attacks     Page: CON52-J. Document thread-safety and use annotations where applicable     Page: EXP50-J. Do not confuse abstract object equality with reference equality     Page: IDS56-J. Prevent arbitrary file upload     Page: IDS53-J. Prevent XPath Injection     Page: EXP01-J. Do not use a null in a case where an object is required     Page: IDS14-J. Do not trust the contents of hidden form fields     Page: IDS15-J. Do not allow sensitive information to leak outside a trust boundary     Page: MSC07-J. Prevent multiple instantiations of singleton objects     Page: STR01-J. Do not assume that a Java char fully represents a Unicode code point     Page: IDS03-J. Do not log unsanitized user input     Page: STR04-J. Use compatible character encodings when communicating string data between JVMs     Page: IDS54-J. Prevent LDAP injection     Page: STR02-J. Specify an appropriate locale when comparing locale-dependent data

Parent Page     Page: Rule or Rec. CC. Analyzers

• analyzer

Time	Editor
Oct 14, 2024 07:23	David Svoboda	View Changes
Feb 08, 2024 09:03	David Svoboda	View Changes
Jul 13, 2023 13:36	David Svoboda	View Changes
Jun 06, 2023 12:22	David Svoboda	View Changes
Apr 19, 2023 14:04	David Svoboda

External Links (30)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…

SEI CERT Oracle Coding Standard for Java (1)     Page: The Checker Framework_V