Not Applicable to Android (Java Rules/Recomendations)
Rules
- ENV00-J. Do not sign code that performs only unprivileged operations
- ENV01-J. Place all security-sensitive code in a single JAR and sign and seal it
- ENV03-J. Do not grant dangerous combinations of permissions
- ENV05-J. Do not deploy an application that can be remotely monitored
- SEC00-J. Do not allow privileged blocks to leak sensitive information across a trust boundary
- SEC04-J. Protect sensitive operations with security manager checks
- SEC07-J. Call the superclass's getPermissions() method when writing a custom class loader
- SER04-J. Do not allow serialization and deserialization to bypass the security manager