1. Security

Security: Introduction

• Page:
  FIO52-J. Do not store unencrypted sensitive information on the client side
• Page:
  IDS51-J. Properly encode or escape output
• Page:
  IDS52-J. Prevent code injection
• Page:
  IDS53-J. Prevent XPath Injection
• Page:
  IDS54-J. Prevent LDAP injection
• Page:
  IDS56-J. Prevent arbitrary file upload
• Page:
  MET52-J. Do not use the clone() method to copy untrusted method parameters
• Page:
  MET56-J. Do not use Object.equals() to compare cryptographic keys
• Page:
  MSC59-J. Limit the lifetime of sensitive data
• Page:
  MSC61-J. Do not use insecure or weak cryptographic algorithms
• Page:
  MSC62-J. Store passwords using a hash function
• Page:
  MSC63-J. Ensure that SecureRandom is properly seeded
• Page:
  OBJ56-J. Provide sensitive mutable classes with unmodifiable wrappers
• Page:
  OBJ57-J. Do not rely on methods that can be overridden by untrusted code
• Page:
  SEC50-J. Avoid granting excess privileges
• Page:
  SEC51-J. Minimize privileged code
• Page:
  SEC52-J. Do not expose methods that use reduced-security checks to untrusted code
• Page:
  SEC53-J. Define custom security permissions for fine-grained security
• Page:
  SEC54-J. Create a secure sandbox using a security manager
• Page:
  SEC55-J. Ensure that security-sensitive methods are called with validated arguments
• Page:
  SEC57-J. Do not let untrusted code misuse privileges of callback methods