Not Applicable to Android (Java Rules/Recomendations)

Created by Barbara White, last updated by Sandy Shrum on May 07, 2015 1 minute read

Rules

Page:

ENV00-J. Do not sign code that performs only unprivileged operations
Page:

ENV01-J. Place all security-sensitive code in a single JAR and sign and seal it
Page:

ENV03-J. Do not grant dangerous combinations of permissions
Page:

ENV05-J. Do not deploy an application that can be remotely monitored
Page:

SEC00-J. Do not allow privileged blocks to leak sensitive information across a trust boundary
Page:

SEC04-J. Protect sensitive operations with security manager checks
Page:

SEC07-J. Call the superclass's getPermissions() method when writing a custom class loader
Page:

SER04-J. Do not allow serialization and deserialization to bypass the security manager

Recommendations