Rule 25. Serialization (SER)

Contents

Android Only

C

C++

Java

• Page:
  SER00-J. Enable serialization compatibility during class evolution
• Page:
  SER01-J. Do not deviate from the proper signatures of serialization methods
• Page:
  SER02-J. Sign then seal objects before sending them outside a trust boundary
• Page:
  SER03-J. Do not serialize unencrypted sensitive data
• Page:
  SER05-J. Do not serialize instances of inner classes
• Page:
  SER06-J. Make defensive copies of private mutable components during deserialization
• Page:
  SER07-J. Do not use the default serialized form for classes with implementation-defined invariants
• Page:
  SER08-J. Minimize privileges before deserializing from a privileged context
• Page:
  SER09-J. Do not invoke overridable methods from the readObject() method
• Page:
  SER10-J. Avoid memory and resource leaks during serialization
• Page:
  SER11-J. Prevent overwriting of externalizable objects