SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: SER08-J. Minimize privileges before deserializing from a privileged context  
Author: Dhruv Mohindra Jul 22, 2009
Last Changed by: Will Snavely Nov 16, 2017
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/yjdGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (2)
    Page: SER09-J. Do not invoke overridable methods from the readObject() method
    Page: OBJ11-J. Be wary of letting constructors throw exceptions
Hierarchy
Parent Page
    Page: Rule 14. Serialization (SER)
Labels
Global Labels (8)
Recent Changes
Time Editor  
Nov 16, 2017 14:43 Will Snavely View Changes
Jun 26, 2015 12:27 Carol J. Lallier View Changes
Apr 07, 2015 12:00 Will Snavely View Changes
Mar 30, 2015 16:05 Will Snavely View Changes
Dec 05, 2012 02:39 Pranjal Jumde  
Outgoing Links
External Links (6)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353
    cwe.mitre.org/data/definitions/250.html
    cwe.mitre.org/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
SEI CERT Oracle Coding Standard for Java (3)     Home page: SEI CERT Oracle Coding Standard for Java
    Page: Rule AA. References
    Page: Rule BB. Glossary