Skip to main content
assistive.skiplink.to.breadcrumbs
assistive.skiplink.to.header.menu
assistive.skiplink.to.action.menu
assistive.skiplink.to.quick.search

Page History

Versions Compared

Old Version 82

changes.mady.by.user Dhruv Mohindra

Saved on Sep 16, 2009

compared with

New Version Current

changes.mady.by.user David Svoboda

Saved on Aug 07, 2025

Key

This line was added.
This line was removed.
Formatting was changed.

Rules

Content by Label

showLabels	false
max	99
spaces	com.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@3bbaf8c
showSpace	false
sort	title
cql	label = "fio" and label = "rule" and label != "void" and space = currentSpace()
labels	+fio, +rule, -void

Recommendations

FIO00-J. Canonicalize path names originating from untrusted sources

FIO01-J. Do not let Runtime.exec() fail or block indefinitely

FIO02-J. Keep track of bytes read and account for character encoding while reading data

FIO03-J. Specify the character encoding while performing file or network IO

Rules

FIO30-J. Do not log sensitive information

FIO31-J. Defensively copy mutable inputs and mutable internal components

FIO32-J. Ensure all resources are properly closed when they are no longer needed

FIO33-J. Exclude user input from format strings

FIO34-J. Create and delete temporary files safely

FIO35-J. Always validate user input

FIO36-J. Do not create multiple buffered wrappers on an InputStream

FIO37-J. Do not expose buffers created using the wrap() or duplicate() methods to untrusted code

FIO38-J. Do not use file locks for arbitrating file access at the thread level

Risk Assessment Summary

Recommendations

Recommendation Rule	Severity	Likelihood	Detectable	Repairable Remediation Cost	Priority	Level
FIO00-J	Medium	Unlikely medium	unlikely No	medium No	P4 P2	L3
FIO01-J	Medium	low Probable	probable No	medium No	P4	L3
FIO02-J	Medium	Probable	Yes	Yes	P12	L1
FIO03-J	Medium	Probable	No	No	P4	low	unlikely	medium	P2	L3 FIO03
FIO04-J	Low	Probable low	unlikely Yes	medium No	P2 P4	L3

...

Rules Severity Likelihood Remediation Cost Priority Level

FIO05-J	Medium	Likely	No	No	P6	L2 FIO30
FIO06-J	Low	Unlikely medium	probable No	high No	P4 P1	L3 FIO31
FIO07-J	Low	medium Probable	probable Yes	high No	P4	L3
FIO32- J	low	probable	medium	P4	L3
FIO33- J	medium	unlikely	medium	P4	L3
FIO34- J	medium	probable	high	P4	L3
FIO36- J	low	unlikely	medium	P2	L3

FIO08-J	High	Probable	Yes	Yes	P18	L1
FIO09-J	Low	Unlikely	No	Yes	P2	L3
FIO10-J	Low	Unlikely	No	No	P1	L3
FIO12-J	Low	Unlikely	No	No	P1	L3
FIO13-J	Medium	Probable	No	No	P4	L3
FIO14-J	Medium	Likely	No	No	P6	L2
FIO16-J	Medium	Unlikely	No	No	P2	L3

...

Image Added Image Added Image Added OBJ38-J. Immutable classes must prohibit extension The CERT Sun Microsystems Secure Coding Standard for Java FIO00-J. Canonicalize path names originating from untrusted sources