SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: ENV01-J. Place all security-sensitive code in a single JAR and sign and seal it  
Author: Dhruv Mohindra Sep 23, 2009
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/6jdGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (3)
    Page: ENV00-J. Do not sign code that performs only unprivileged operations
    Page: ENV02-J. Do not trust the values of environment variables
    Page: Privilege Escalation
Hierarchy
Parent Page
    Page: Rule 16. Runtime Environment (ENV)
Labels
Global Labels (9)
Recent Changes
Time Editor  
Aug 06, 2025 17:10 Amy Gale View Changes
REM cost reform
Mar 10, 2025 20:32 Amy Gale View Changes
Updated CodeSonar mapping info
Jan 30, 2025 22:58 Amy Gale View Changes
Localize CodeSonar crossreferences to C++ scope
Aug 12, 2024 02:32 Valery View Changes
Aug 06, 2021 08:28 Jon O'Donnell  
Outgoing Links
External Links (3)
    cwe.mitre.org/
    cwe.mitre.org/data/definitions/349.html
    https://docs.oracle.com/javase/7/docs/technotes/guides/exte…
SEI CERT Oracle Coding Standard for Java (9)     Page: Rule BB. Glossary
    Page: Rule AA. References
    Page: ENV02-J. Do not trust the values of environment variables
    Page: ENV00-J. Do not sign code that performs only unprivileged operations
    Page: Rule 16. Runtime Environment (ENV)
    Page: CodeSonar_V
    Home page: SEI CERT Oracle Coding Standard for Java
    Page: CodeSonar
    Page: SEC01-J. Do not allow tainted variables in privileged blocks