SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: MSC08-J. Do not store nonserializable objects as attributes in an HTTP session  
Author: David Svoboda Feb 21, 2014
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/5DZGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (1)
    Page: MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to].
Hierarchy
Parent Page
    Page: Rule 49. Miscellaneous (MSC)
Labels
Global Labels (4)
Recent Changes
Time Editor  
Aug 06, 2025 17:17 David Svoboda View Changes
REM cost reform
Jul 13, 2015 07:55 Carol J. Lallier View Changes
Jul 13, 2015 07:54 Carol J. Lallier View Changes
Aug 11, 2014 15:03 Fred Long View Changes
Aug 11, 2014 15:02 David Svoboda  
changing RA Table
Outgoing Links
External Links (5)
    https://www.securecoding.cert.org/confluence/pages/viewpage…
    https://www.securecoding.cert.org/confluence/display/java/M…
    docs.oracle.com/javaee/5/api/javax/servlet/http/HttpSession…
    https://www.securecoding.cert.org/confluence/display/java/A…
    www.hpenterprisesecurity.com/vulncat/en/vulncat/dotnet/asp_…
SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java
    Page: MSC09-J. For OAuth, ensure (a) [relying party receiving user's ID in last step] is same as (b) [relying party the access token was granted to].