04. Object Orientation (OBJ)

Created by Fred Long, last updated by David Svoboda on May 20, 2011 1 minute read

You are viewing an old version of this page. View the current version.

Rules

Page:

OBJ01-J. Limit accessibility of fields
Page:

OBJ02-J. Preserve dependencies in subclasses when changing superclasses
Page:

OBJ03-J. Prevent heap pollution
Page:

OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
Page:

OBJ05-J. Do not return references to private mutable class members
Page:

OBJ06-J. Defensively copy mutable inputs and mutable internal components
Page:

OBJ07-J. Sensitive classes must not let themselves be copied
Page:

OBJ08-J. Do not expose private members of an outer class from within a nested class
Page:

OBJ09-J. Compare classes and not class names
Page:

OBJ10-J. Do not use public static nonfinal fields
Page:

OBJ11-J. Be wary of letting constructors throw exceptions
Page:

OBJ12-J. Respect object-based annotations
Page:

OBJ13-J. Ensure that references to mutable objects are not exposed
Page:

OBJ14-J. Do not use an object that has been freed.
Page:

OBJ50-J. Never confuse the immutability of a reference with that of the referenced object
Page:

OBJ51-J. Minimize the accessibility of classes and their members
Page:

OBJ52-J. Write garbage-collection-friendly code
Page:

OBJ53-J. Do not use direct buffers for short-lived, infrequently used objects
Page:

OBJ54-J. Do not attempt to help the garbage collector by setting local reference variables to null
Page:

OBJ55-J. Remove short-lived objects from long-lived container objects
Page:

OBJ56-J. Provide sensitive mutable classes with unmodifiable wrappers
Page:

OBJ57-J. Do not rely on methods that can be overridden by untrusted code
Page:

OBJ58-J. Limit the extensibility of classes and methods with invariants
Page:

Rec. 05. Object Orientation (OBJ)
Page:

Rule 05. Object Orientation (OBJ)

Risk Assessment Summary

Rule	Severity	Likelihood	Remediation Cost	Priority	Level
OBJ00-J	medium	likely	medium	P12	L1
OBJ01-J	medium	likely	medium	P12	L1
OBJ02-J	medium	likely	medium	P12	L1
OBJ03-J	low	probable	medium	P4	L3
OBJ04-J	low	likely	medium	P6	L2
OBJ05-J	high	probable	medium	P12	L1
OBJ06-J	medium	probable	high	P4	L3
OBJ07-J	medium	probable	medium	P8	L2
OBJ08-J	medium	probable	medium	P8	L2
OBJ09-J	medium	probable	medium	P8	L2
OBJ10-J	medium	probable	medium	P8	L2
OBJ11-J	high	probable	medium	P12	L1
OBJ12-J	high	unlikely	low	P9	L2
OBJ13-J	medium	probable	high	P4	L3

NUM13-J. Beware of precision loss when converting primitive integers to floating-point The CERT Oracle Secure Coding Standard for Java OBJ00-J. Limit extensibility of classes and methods with invariants to trusted subclasses only

No labels

Space shortcuts

Page tree

Rules

Risk Assessment Summary