SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: SEC03-J. Do not load trusted classes after allowing untrusted code to load arbitrary classes  
Author: Dhruv Mohindra Jul 05, 2008
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/-TZGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (4)
    Page: SEC04-J. Protect sensitive operations with security manager checks
    Page: SEC52-J. Do not expose methods that use reduced-security checks to untrusted code
    Page: LCK02-J. Do not synchronize on the class object returned by getClass()
    Page: SEC02-J. Do not base security checks on untrusted sources
Hierarchy
Parent Page
    Page: Rule 15. Platform Security (SEC)
Labels
Global Labels (8)
Recent Changes
Time Editor  
Aug 06, 2025 17:07 David Svoboda View Changes
REM cost reform
May 18, 2021 08:46 Michal Rozenau View Changes
Parasoft Jtest 2021.1
Feb 26, 2021 09:50 Michal Rozenau View Changes
Parasoft Jtest 2020.2
Nov 03, 2015 19:04 Arthur Hicken View Changes
added parasoft
Jul 14, 2014 14:16 David Svoboda  
Outgoing Links
External Links (4)
    https://issues.apache.org/bugzilla/show_bug.cgi?id=29936
    cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0783
    www.oracle.com/technetwork/java/seccodeguide-139067.html
    tomcat.apache.org/security-6.html
SEI CERT Oracle Coding Standard for Java (7)     Page: OBJ11-J. Be wary of letting constructors throw exceptions
    Home page: SEI CERT Oracle Coding Standard for Java
    Page: Rule 15. Platform Security (SEC)
    Page: Rule AA. References
    Page: SEC04-J. Protect sensitive operations with security manager checks
    Page: OBJ10-J. Do not use public static nonfinal fields
    Page: SEC02-J. Do not base security checks on untrusted sources