Skip to main content
assistive.skiplink.to.breadcrumbs
assistive.skiplink.to.header.menu
assistive.skiplink.to.action.menu
assistive.skiplink.to.quick.search

Page History

Versions Compared

Old Version 89

changes.mady.by.user Ankur Goyal

Saved on Aug 20, 2009

compared with

New Version Current

changes.mady.by.user David Svoboda

Saved on Aug 07, 2025

Key

This line was added.
This line was removed.
Formatting was changed.

Rules

Content by Label

showLabels	false
max	99
spaces	com.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@3bbaf8c
showSpace	false
sort	title
cql	label = "msc" and label = "rule" and label != "void" and space = currentSpace()
labels	+msc,-void, +rule

Risk Assessment Summary

Rule	Severity	Likelihood	Detectable	Repairable

Recommendations

MSC00-J. Eliminate class initialization cycles

MSC01-J. Avoid memory leaks

MSC02-J. Avoid cyclic dependencies between packages

MSC03-J. Prefer using URIs to URLs

MSC04-J. Prefer using Iterators over Enumerations

MSC05-J. Carefully design interfaces before releasing them

MSC06-J. Avoid mixing generic and non-generic code if possible

MSC07-J. Library methods should validate their parameters

MSC08-J. Finish every set of statements associated with a case label with a break statement

MSC09-J. Do not assume infinite heap space

MSC10-J. Limit the lifetime of sensitive data

Rules

MSC30-J. Generate truly random numbers

MSC31-J. Never hardcode sensitive information

MSC32-J. Prevent OS Command Injection

MSC33-J. Prevent against SQL Injection

MSC34-J. Prevent XML Injection

MSC35-J. Prevent XPath Injection

MSC36-J. Understand how escape characters are interpreted when String literals are compiled

MSC37-J. Make sensitive classes noncloneable

MSC38-J. Do not modify the underlying collection when an iteration is in progress

Risk Assessment Summary

Recommendations

Recommendation	Severity	Likelihood	Remediation Cost	Priority	Level
MSC00-J	Medium	Likely low	unlikely No	medium No	P2 P6	L3 L2
MSC01-J	Low	low Unlikely	unlikely Yes	high Yes	P1 P3	L3
MSC02-J	low High	unlikely Probable	medium No	P2 No	L3	MSC03-J	medium	probable	medium	P8	P6	L2 MSC04
MSC03-J	high High	probable Probable	low No	P18	L1	No	P6	MSC05-J	medium	probable	medium	P8	L2 MSC06
MSC04-J	TODO Low TODO	Unlikely	TODO	P???	L???
MSC07-J	medium	unlikely	medium	P4	L3
No	No	P1	L3
MSC05-J	Low	Probable	No	No	MSC08-J	low	unlikely	medium	P2	L3 MSC011
MSC06-J	Low	Probable medium	unlikely No	high No	P2	L3

Rules

Rule	Severity	Likelihood	Remediation Cost	Priority	Level
MSC30MSC07-J	medium Low	unlikely Unlikely	medium Yes	P4	L3	MSC35-J	medium	unlikely	high	No	P2	L3

...

EXC31-J. Handle checked exceptions that can be thrown within a finally block The CERT Sun Microsystems Secure Coding Standard for Java MSC00-J. Eliminate class initialization cycles Image Added Image Added Image Added