Rules
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Risk Assessment Summary
Rule | Severity | Likelihood | Detectable | Repairable |
|---|
Recommendations
MSC00-J. Eliminate class initialization cycles
ENV01-J. Be aware of the JVM Tool Interface
ENV02-J. Be aware of the Java Platform Debugger Architecture
ENV03-J. Be aware of JVM Monitoring and Managing
MSC05-J. Reserved (moved to MSC38-J)
MSC06-J. Avoid cyclic dependencies between packages
MSC07-J. Prefer using URIs to URLs
MSC08-J. Prefer using Iterators over Enumerations
MSC09-J. Carefully design interfaces before releasing them
MSC10-J. Avoid mixing generic and non-generic code if possible
MSC11-J. Library methods should validate their parameters
MSC12-J. Limit the lifetime of sensitive data
MSC13-J. Finish every set of statements associated with a case label with a break statement
Rules
MSC30-J. Generate truly random numbers
MSC31-J. Never hardcode sensitive information
ENV35-J. Provide a trusted environment and sanitize all inputs
MSC33-J. Prevent OS Command Injection
MSC34-J. Prevent against SQL Injection
MSC35-J. Understand how escape characters are interpreted when String literals are compiled
MSC36-J. Prevent XML Injection
MSC37-J. Prevent XPath Injection
MSC38-J. Make sensitive classes noncloneable
MSC39-J. Do not modify the underlying collection when an iteration is in progress
Risk Assessment Summary
Recommendations
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MSC00-J | Medium | Likely low | unlikely No | medium No | P2 P6 | L3 L2 | |||||||
| MSC01-J | Low | low Unlikely | unlikely Yes | high Yes | P1 P3 | L3 | |||||||
| MSC02-J | High | low Probable | unlikely No | medium No | P2 P6 | L3 L2 | |||||||
| MSC03-J | High | medium Probable | probable No | medium No | P8 P6 | L2 | |||||||
| MSC04-J | Low | high Unlikely | probable No | low No | P18 P1 | L1 L3 | |||||||
| MSC05-J | medium Low | probable Probable | medium No | P18 | L1 | ||||||||
MSC06-J | TODO | TODO | TODO | TODO | TODO | ||||||||
| No | P2 | MSC07-J | medium | unlikely | medium | P4 | L3 MSC08 | ||||||
| MSC06-J | low Low | unlikely Probable | medium | P2 | L3 | MSC011-J | medium | unlikely | high | No | No | P2 | L3 |
Rules
Rule | Severity | Likelihood | Remediation Cost | Priority | Level | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MSC30MSC07-J | medium Low | unlikely Unlikely | medium Yes | P4 | L3 | MSC35-J | medium | unlikely | high | No | P2 | L3 |
...
EXC31-J. Handle checked exceptions that can be thrown within a finally block The CERT Sun Microsystems Secure Coding Standard for Java MSC00-J. Eliminate class initialization cycles