Explore
1-25 of 371
Access Control: MvcRequestMatcher is more secure than AntPathRequestMatcher for Spring MVC patterns
When using Spring MVC it's recommended to use MvcRequestMatcher as it protects the paths Spring annotations will match on, instead of only the one provided.
- warning
- java
- Spring
- security
- Spring MVC
- Spring Security
- access control
Android WebView best practices: Insecure settings
Enabling this WebView setting has security implications
- warning
- java
- security
- framework specific
- Android
- mobile
- Android security set
appendShortText is different in java.time
appendShortText is different in java.time
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
appendTimeZoneId is now appendZoneId
appendTimeZoneId is now appendZoneId
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
appendTimeZoneOffset is now appendOffsetId
appendTimeZoneOffset is now appendOffsetId
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Argument needs to be migrated from DateTimeFieldType to java.time.TemporalField
Argument needs to be migrated from DateTimeFieldType to java.time.TemporalField
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Argument needs to be migrated from DateTimeFieldType to TemporalField
Argument needs to be migrated from DateTimeFieldType to TemporalField
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Argument needs to be migrated from DateTimeFieldType to TemporalField
Argument needs to be migrated from DateTimeFieldType to TemporalField
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Argument needs to be migrated from DateTimeParser to java.time.format.DateTimeFormatter
Argument needs to be migrated from DateTimeParser to java.time.format.DateTimeFormatter
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Argument needs to be migrated to java.time.format.DateTimeFormatter
Argument needs to be migrated to java.time.format.DateTimeFormatter
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Authentication: Username Enumeration: avoid UsernameNotFoundException
Avoid throwing a UsernameNotFoundException as it could lead to username enumeration
- warning
- java
- Spring
- security
- framework specific
- web
- Spring Security
- OWASP Top 10
Authentication: Username Enumeration: setHideUserNotFoundExceptions should be set to true
Prevent enumeration by not throwing an exception that reveals the existence of the username
- warning
- java
- Spring
- security
- framework specific
- web
- Spring Security
- OWASP Top 10
Century of Era is not supported in java.time
Century of Era is not supported in java.time
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Code Injection: Prevent use of CreatePackageContext
Do not use the createPackageContext to dynamically load code
- warning
- java
- security
- framework specific
- mobile
- Android
Configuration - User Interface: Avoid Tapjacking: Add filterTouchesWhenObscured
Not setting filterTouchesWhenObscured to true allows adversaries to hijack users' taps.
- warning
- xml
- security
- framework specific
- mobile
- Android
Configuration - User Interface: Avoid Tapjacking: Enable filterTouchesWhenObscured
Setting filterTouchesWhenObscured to false allows adversaries to hijack users' taps.
- warning
- xml
- security
- mobile
- framework specific
- Android
Convert appendDecimal to appendValue
Convert appendDecimal to appendValue
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Convert appendSignedDecimal to appendValue
Convert appendSignedDecimal to appendValue
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Convert appendSomethingShortText to appendText(ChronoField.SOMETHING,TextStyle.SHORT)
Convert appendSomethingShortText to appendText(ChronoField.SOMETHING,TextStyle.SHORT)
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Convert appendSomethingText to appendText(ChronoField.SOMETHING)
Convert appendSomethingText to appendText(ChronoField.SOMETHING)
- warning
- java
- java.time
- framework specific
- Joda-Time
- quality
Convert DateTimeFormatterBuilder to java.time
Convert DateTimeFormatterBuilder to java.time
- warning
- java
- framework specific
- java.time
- Joda-Time
- quality
Convert DateTimeZone forOffsetHoursMinutes to java.time.ZoneOffset
Convert DateTimeZone forOffsetHoursMinutes to java.time.ZoneOffset
- warning
- java
- framework specific
- java.time
- Joda-Time
- quality
Convert DateTimeZone.forOffsetHours to java.time.ZoneOffset
Convert DateTimeZone.forOffsetHours to java.time.ZoneOffset
- warning
- java
- framework specific
- java.time
- Joda-Time
- quality
Convert DateTimeZone.forOffsetMillis to java.time.ZoneOffset
Convert DateTimeZone.forOffsetMillis to java.time.ZoneOffset
- warning
- java
- framework specific
- java.time
- Joda-Time
- quality
Convert DateTimeZone.forTimeZone to ZoneId.forID
Convert DateTimeZone.forTimeZone to ZoneId.forID
- warning
- java
- framework specific
- java.time
- Joda-Time
- quality