(THIS CODING RULE OR GUIDELINE IS UNDER CONSTRUCTION)
This is just a place holder for now.
The rule will say not to trust libraries, paths to libraries that are in world writable media, and do not process data from world writable sources. However, I do not see anything here that is Android specific.
Is there something particular about Android that makes this sort of behaviour more likely?
Noncompliant Code Example
This noncompliant code example shows an application that ...
TBD
...
Compliant Solution
In this compliant solution ...:
TBD
Risk Assessment
TBD
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
DRD12-J | High | Probable | Medium | P12 | L1 |
Automated Detection
TBD
Bibliography
[TBD] |