Explore
1-25 of 38
Automatic region detection by AWS
AWS can automatically detect the region from the environment
- marked_information
- java
- framework specific
- AWS
- quality
Collections: Do not expose internal Lists
Do not expose an internal List as it is mutable. Return a copy or immutable view.
- marked_information
- java
- security
- Java basic
- quality
Collections: Do not expose internal Sets
Do not expose an internal Set as it is mutable. Return a copy or immutable view.
- marked_information
- java
- security
- Java basic
- quality
Crypto: KeyAgreement: Guide on Approved Cryptographic Algorithm
This cryptographic algorithm is not recommended
- marked_information
- java
- security
- basic protection set
Crypto: Signature: Approved Hashing Algorithm
This hashing algorithm is not recommended for cryptographic use
- marked_information
- java
- security
- basic protection set
Data Protection - Cryptography: Avoid cryptographic weakness: Use appropriate secret key generation algorithm: Other algorithms
Could lead to brute forcing or other cryptographic weakness
- marked_information
- java
- security
- basic protection set
DateTimeFormatter has no equivalent method in java.time
DateTimeFormatter has no equivalent method in java.time
- marked_information
- java
- framework specific
- java.time
- Joda-Time
- quality
Prevent CRLF injection in SLF4J
Encode untrustated data to prevent the log files from CRLF injections
- marked_information
- java
- security
- SLF4J
- framework specific
- logging
- injection
Prevent CRLF injection in SLF4J using the Logstash Logback Encoder
Encode untrustated data to prevent the log files from CRLF injections
- marked_information
- java
- security
- SLF4J
- framework specific
- logging
- injection
SLF4J Logging: enforce usage of placeholders in the messages
Do not concatenate untrusted data in the message string, instead use placeholders ( '{}' )
- marked_information
- java
- security
- logging
- injection
- OWASP Top 10
- SLF4J
- framework specific
SLF4J Logging: Logger modifiers
The logger should be a private static final field
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Naming convention: Reserved logger name
The name "logger" should be reserved for the SLF4J logger instance. Use Refactor Rename (Shift+F6) to rename this variable.
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Naming convention: Standardise logger name
The SLF4J logger instance should be named "logger". Use Refactor Rename (Shift+F6) to rename this variable.
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Print Exceptions using SLF4J instead
Standardise on SLF4J by replacing this call
- marked_information
- java
- security
- SLF4J
- framework specific
- logging
SLF4J Logging: Replace java.util.logging with SLF4J (Debug)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Error)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Info)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Debug)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Error)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Debug)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Error)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Info)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Trace)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Exception Warning)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality
SLF4J Logging: Replace java.util.logging with SLF4J (Log Info)
Standardise on SLF4J by replacing this call
- marked_information
- java
- SLF4J
- framework specific
- logging
- quality