SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: IDS15-J. Do not allow sensitive information to leak outside a trust boundary  
Author: David Svoboda Jun 17, 2014
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/2DZGBQ
Export As: Word · PDF  
Hierarchy
Parent Page
    Page: Rule 00. Input Validation and Data Sanitization (IDS)
Labels
Global Labels (4)
Recent Changes
Time Editor  
Aug 06, 2025 10:10 David Svoboda View Changes
REM cost reform
Oct 05, 2016 16:33 David Svoboda View Changes
AD TCF
Jun 17, 2015 11:51 Carol J. Lallier View Changes
Jun 17, 2015 11:50 Carol J. Lallier View Changes
Oct 20, 2014 10:26 David Svoboda  
Outgoing Links
External Links (6)
    www.hpenterprisesecurity.com/vulncat/en/vulncat/dotnet/cook…
    https://www.securecoding.cert.org/confluence/pages/viewpage…
    www.hpenterprisesecurity.com/vulncat/en/vulncat/dotnet/priv…
    www.hpenterprisesecurity.com/vulncat/en/vulncat/sql/privacy…
    www.hpenterprisesecurity.com/vulncat/en/vulncat/java/cookie…
    https://www.securecoding.cert.org/confluence/display/java/A…
SEI CERT Oracle Coding Standard for Java (6)     Home page: SEI CERT Oracle Coding Standard for Java
    Page: The Checker Framework_V
    Page: IDS16-J. Prevent XML Injection
    Page: The Checker Framework
    Page: IDS14-J. Do not trust the contents of hidden form fields
    Page: ERR01-J. Do not allow exceptions to expose sensitive information
Android (2)     Page: DRD11. Ensure that sensitive data is kept secure
    Page: DRD00. Do not store sensitive information on external storage (SD card) unless encrypted first