Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Rules

Content by Label
showLabelsfalse
max99
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@3bbaf8c
showSpacefalse
sorttitle
cqllabel = "fio" and label = "rule" and label != "void" and space = currentSpace()
labels+fio, +rule, -void

Risk Assessment Summary

Recommendations

Rule

Severity

Likelihood

Detectable

Repairable

Priority

Level

FIO00-J

...

MediumUnlikelyNoNo

P2

L3

FIO01-J

...

MediumProbableNoNo

P4

L3

FIO02-JMediumProbableYesYes

P12

L1

FIO03-JMediumProbableNoNo

P4

L3

FIO04-JLowProbableYesNo

P4

L3

FIO05-JMediumLikelyNoNo

P6

L2

FIO06-JLowUnlikelyNoNo

P1

L3

FIO07-JLowProbableYesNo

P4

L3

FIO08-JHighProbableYesYes

P18

L1

FIO09-JLowUnlikelyNoYes

P2

L3

FIO10-JLowUnlikelyNoNo

P1

L3

FIO12-JLowUnlikelyNoNo

P1

L3

FIO13-JMediumProbableNoNo

P4

L3

FIO14-JMediumLikelyNoNo

P6

L2

FIO16-JMediumUnlikelyNoNo

P2

L3


...

Image Added Image Added Image Added

...

FIO02-J. Use Runtime.exec() correctly

FIO04-J. Understand the limitations of the logging framework

FIO05-J. Document character encoding while performing file IO

FIO06-J. Validate user input

Rules

FIO31-J. Create a copy of mutable inputs

FIO32-J. Do not serialize sensitive data

FIO33-J. Do not allow serialization and deserialization to bypass the Security Manager

FIO34-J. Ensure all resources are properly closed when they are no longer needed

FIO35-J. Exclude user input from format strings

FIO36-J. Never hardcode sensitive information

FIO37-J. Do not assume infinite heap space when reading in data

Risk Assessment Summary

Recommendations

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

FIO00-A

low

unlikely

medium

P2

L3

Rules

...

Rules

...

Severity

...

Likelihood

...

Remediation Cost

...

Priority

...

Level

...

FIO30-C

...

low

...

unlikely

...

medium

...

P2

...