Explore

Filters (0) Clear filters
Languages
Level
Tags

1-25 of 38

Automatic region detection by AWS

AWS can automatically detect the region from the environment

  • marked_information
  • java
  • framework specific
  • AWS
  • quality
Collections: Do not expose internal Lists

Do not expose an internal List as it is mutable. Return a copy or immutable view.

  • marked_information
  • java
  • security
  • Java basic
  • quality
Collections: Do not expose internal Sets

Do not expose an internal Set as it is mutable. Return a copy or immutable view.

  • marked_information
  • java
  • security
  • Java basic
  • quality
Crypto: KeyAgreement: Guide on Approved Cryptographic Algorithm

This cryptographic algorithm is not recommended

  • marked_information
  • java
  • security
  • basic protection set
Crypto: Signature: Approved Hashing Algorithm

This hashing algorithm is not recommended for cryptographic use

  • marked_information
  • java
  • security
  • basic protection set
Data Protection - Cryptography: Avoid cryptographic weakness: Use appropriate secret key generation algorithm: Other algorithms

Could lead to brute forcing or other cryptographic weakness

  • marked_information
  • java
  • security
  • basic protection set
DateTimeFormatter has no equivalent method in java.time

DateTimeFormatter has no equivalent method in java.time

  • marked_information
  • java
  • framework specific
  • java.time
  • Joda-Time
  • quality
Prevent CRLF injection in SLF4J

Encode untrustated data to prevent the log files from CRLF injections

  • marked_information
  • java
  • security
  • SLF4J
  • framework specific
  • logging
  • injection
Prevent CRLF injection in SLF4J using the Logstash Logback Encoder

Encode untrustated data to prevent the log files from CRLF injections

  • marked_information
  • java
  • security
  • SLF4J
  • framework specific
  • logging
  • injection
SLF4J Logging: enforce usage of placeholders in the messages

Do not concatenate untrusted data in the message string, instead use placeholders ( '{}' )

  • marked_information
  • java
  • security
  • logging
  • injection
  • OWASP Top 10
  • SLF4J
  • framework specific
SLF4J Logging: Logger modifiers

The logger should be a private static final field

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Naming convention: Reserved logger name

The name "logger" should be reserved for the SLF4J logger instance. Use Refactor Rename (Shift+F6) to rename this variable.

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Naming convention: Standardise logger name

The SLF4J logger instance should be named "logger". Use Refactor Rename (Shift+F6) to rename this variable.

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Print Exceptions using SLF4J instead

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • security
  • SLF4J
  • framework specific
  • logging
SLF4J Logging: Replace java.util.logging with SLF4J (Debug)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Error)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Info)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Debug)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Error)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Debug)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Error)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Info)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Trace)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Warning)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Info)

Standardise on SLF4J by replacing this call

  • marked_information
  • java
  • SLF4J
  • framework specific
  • logging
  • quality