Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Rules

Content by Label
showLabelsfalse
max99
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@3bbaf8c
showSpacefalse
sorttitle
cqllabel = "msc" and label = "rule" and label != "void" and space = currentSpace()
labels+msc,-void, +rule

Risk Assessment Summary

Rule

Severity

Likelihood

Detectable

Repairable

Recommendations

MSC00-J. Eliminate class initialization cycles

MSC01-J. Avoid memory leaks

MSC02-J. Be aware of the JVM Tool Interface

MSC03-J. Be aware of the Java Platform Debugger Architecture

MSC04-J. Be aware of JVM Monitoring and Managing

MSC05-J. Make sensitive classes noncloneable

MSC06-J. Avoid cyclic dependencies between packages

MSC07-J. Prefer using URIs to URLs

MSC08-J. Prefer using Iterators over Enumerations

MSC09-J. Avoid flaws in interfaces

MSC10-J. Avoid mixing generic and non-generic code if possible

MSC11-J. Methods should validate their parameters

Rules

MSC30-J. Generate truly random numbers

MSC31-J. Never hardcode sensitive information

MSC32-J. Provide a trusted environment and sanitize all inputs

MSC33-J. Prevent OS Command Injection

MSC34-J. Prevent against SQL Injection

MSC35-J. Understand how escape characters are interpreted when String literals are compiled

Risk Assessment Summary

Recommendations

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MSC00-JMedium low Likely unlikely No medium No

P2 P6

L3 L2

MSC01-JLowUnlikely low unlikely Yes high Yes

P1 P3

L3

MSC02-JHighProbable low unlikely No medium No

P2 P6

L3 L2

MSC03-JHigh medium Probable probable No medium No

P8 P6

L2

MSC04-JLow high Unlikely probable No low No

P18 P1

L1 L3

MSC05-J medium Low probable Probable medium No

P18

L1

MSC06-J

TODO

TODO

TODO

TODO

TODO

No

P2

MSC07-J

medium

unlikely

medium

P4

L3 MSC08

MSC06-J low Low unlikely Probable

medium

P2

L3

MSC011-J

medium

unlikely

high

NoNo

P2

L3

Rules

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

MSC30MSC07-J medium Low unlikely Unlikely

medium

P4

L3

MSC35-J

medium

unlikely

high

P2

L3

YesNo

P2

L3


...

Image Added Image Added Image AddedEXC31-J. Handle checked exceptions that can be thrown within a finally block      The CERT Sun Microsystems Secure Coding Standard for Java      MSC00-J. Eliminate class initialization cycles