Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Automated update-Scrapy V0.1 changing RA Table

Wiki Markup
            "An inner class is a nested class that is not explicitly or implicitly declared static" \[[JLS 2005|AA. Bibliography#JLS 05]\]. Serialization of inner classes (including local and anonymous classes) is error-prone. According to the Serialization Specification \[[Sun 2006|AA. Bibliography#Sun 06]\],

...

Serialization of inner classes can introduce platform dependencies and can cause serialization of instances of the outer class.

Rule Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

SER05-J

medium

likely

medium

P18

L1

Automated Detection

Detection of inner classes that implement serialization is straightforward.

Related Guidelines

MITRE CWE

CWE-499, "Serializable Class Containing Sensitive Data"

Bibliography

P12

L1

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="bc1bc845-88d6-4129-b237-29a7623cd563"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

 

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="2c63b60b-3be6-481b-8a95-b9675d137361"><ac:plain-text-body><![CDATA[

[[Bloch 2008

AA. Bibliography#Bloch 08]]

Item 74: "Implement serialization judiciously"

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="dcf76e40-f22f-48a1-b8fe-907ba1775dd5"><ac:plain-text-body><![CDATA[

[[JLS 2005

AA. Bibliography#JLS 05]]

[Section 8.1.3, Inner Classes and Enclosing Instances

http://java.sun.com/docs/books/jls/third_edition/html/classes.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="15e2979a-5d7c-4900-bb9b-09656096a06c"><ac:plain-text-body><![CDATA[

[[Sun 2006

AA. Bibliography#Sun 06]]

"Serialization specification"

]]></ac:plain-text-body></ac:structured-macro>

...

      13. Serialization (SER)