Checker | Guideline |
|---|
| JAVA.MISC.SD.EXT | DRD00. Do not store sensitive information on external storage (SD card) unless encrypted first |
| JAVA.JS.RI | DRD13. Do not provide addJavascriptInterface method access in a WebView which could contain untrusted content. (API level JELLY_BEAN or below) |
| JAVA.CRYPTO.DEPRECATED | DRD17-J. Do not use the Android cryptographic security provider encryption default for AES |
| JAVA.CRYPTO.* | DRD18. Do not use the default behavior in a cryptographic library if it does not use recommended practices |
| DRD22. Do not cache sensitive information |