Explore
1-12 of 12
Do not compare classes/types by their name
Comparing the class names is less robust than comparing the actual classes
- warning
- java
- Java basic
- SEI CERT
- quality
- security
Do not compare classes/types by their name (literal)
Comparing the class names is less robust than comparing the actual classes
- warning
- java
- Java basic
- SEI CERT
- quality
- security
Do not compare classes/types by their name (literal inverted)
Comparing the class names is less robust than comparing the actual classes
- warning
- java
- Java basic
- SEI CERT
- quality
- security
Incorrect equality check of wrapper values (equals)
Use equals method to compare wrapped values
- error
- java
- Java basic
- quality
- SEI CERT
Incorrect equality check of wrapper values (not equals)
Use equals method to compare wrapped values
- error
- java
- Java basic
- quality
- SEI CERT
Injection: Avoid SQL Injection: Use Parameterized Queries (PreparedStatement)
Could lead to SQL Injection
- error
- java
- security
- SEI CERT
- basic protection set
- injection
- SQL
- OWASP Top 10
Injection: Avoid SQL Injection: Use Parameterized Queries (Statement)
Could lead to SQL Injection
- error
- java
- security
- SEI CERT
- basic protection set
- injection
- SQL
- OWASP Top 10
Portability Flaw: Avoid locale dependent comparisons: equals after case conversion
This comparison is sensitive to the system's locale. Ignore the case or add a locale.
- warning
- java
- security
- Java basic
- quality
- SEI CERT
Regex Injection
Use Pattern#quote to include untrusted input in regexes.
- error
- java
- security
- SEI CERT
- Java basic
- injection
- OWASP Top 10
URLClassloader: Call super when overriding getPermissions
Custom permissions should be based on those of the super class using super.getPermissions
- warning
- java
- security
- Java basic
- SEI CERT
Use SecureRandom instead of Random
Using Random can lead to predictable randomness
- error
- java
- security
- SEI CERT
Use SSLSocket instead of Socket/ServerSocket
Use SSLSocket instead of Socket/ServerSocket
- warning
- java
- security
- web
- SEI CERT