Page Information

Title:	DRD22. Do not cache sensitive information
Author:	Fred Long	Aug 19, 2014
Last Changed by:	Amy Gale	Mar 13, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/H9AxBQ
Export As:	Word · PDF

Android (1)     Page: CodeSonar

Parent Page     Page: Rule 03. WebView (WBV)

• general
• incomplete
• rule
• fio
• android-applicable
• drd
• draft

Time	Editor
Mar 13, 2025 17:35	Amy Gale	View Changes
Added entry for CodeSonar warning class mapping
Mar 12, 2025 14:55	David Svoboda	View Changes
Oct 21, 2017 10:54	Beriwan Salamat Ravandi	View Changes
Added ourCS workshop contributor text box
Apr 08, 2015 19:41	Unknown User (lflynn)	View Changes
Not specific to Java, so removed '-J' from end of rule
Apr 07, 2015 15:23	Unknown User (lflynn)
changed label to FIO from WebView, since some parts of rule (for example, the keyboard cache) are not specific to WebView

External Links (12)
    https://www.securecoding.cert.org/confluence/display/java/A…
    https://developer.android.com/reference/android/webkit/WebV…
    https://developer.android.com/reference/android/webkit/WebV…
    https://viaforensics.com/resources/reports/best-practices-i…
    www.cs.cmu.edu/ourcs/register.html
    https://viaforensics.com/resources/reports/best-practices-i…
    https://www.securecoding.cert.org/confluence/display/java/A…
    https://www.securecoding.cert.org/confluence/display/androi…
    https://www.securecoding.cert.org/confluence/display/java/A…
    https://viaforensics.com/resources/reports/best-practices-i…
    https://developer.android.com/training/articles/security-ti…
    https://viaforensics.com/resources/reports/best-practices-i…

Android (2)     Page: CodeSonar_V     Page: CodeSonar