Rules

Sections

• Rule 00. Input Validation and Data Sanitization (IDS)
• Rule 01. Declarations and Initialization (DCL)
• Rule 02. Expressions (EXP)
• Rule 03. Numeric Types and Operations (NUM)
• Rule 04. Characters and Strings (STR)
• Rule 05. Object Orientation (OBJ)
• Rule 06. Methods (MET)
• Rule 07. Exceptional Behavior (ERR)
• Rule 08. Visibility and Atomicity (VNA)
• Rule 09. Locking (LCK)
• Rule 10. Thread APIs (THI)
• Rule 11. Thread Pools (TPS)
• Rule 12. Thread-Safety Miscellaneous (TSM)
• Rule 13. Input Output (FIO)
• Rule 14. Serialization (SER)
• Rule 15. Platform Security (SEC)
• Rule 16. Runtime Environment (ENV)
• Rule 17. Java Native Interface (JNI)
• Rule 49. Miscellaneous (MSC)
• Rule 50. Android (DRD)

Rule Listing

• DCL00-J. Prevent class initialization cycles
• DCL01-J. Do not reuse public identifiers from the Java Standard Library
• DCL02-J. Do not modify the collection's elements during an enhanced for statement
• ENV00-J. Do not sign code that performs only unprivileged operations
• ENV01-J. Place all security-sensitive code in a single JAR and sign and seal it
• ENV02-J. Do not trust the values of environment variables
• ENV03-J. Do not grant dangerous combinations of permissions
• ENV04-J. Do not disable bytecode verification
• ENV05-J. Do not deploy an application that can be remotely monitored
• ENV06-J. Production code must not contain debugging entry points
• ERR00-J. Do not suppress or ignore checked exceptions
• ERR01-J. Do not allow exceptions to expose sensitive information
• ERR02-J. Prevent exceptions while logging data
• ERR03-J. Restore prior object state on method failure
• ERR04-J. Do not complete abruptly from a finally block
• ERR05-J. Do not let checked exceptions escape from a finally block
• ERR06-J. Do not throw undeclared checked exceptions
• ERR07-J. Do not throw RuntimeException, Exception, or Throwable
• ERR08-J. Do not catch NullPointerException or any of its ancestors
• ERR09-J. Do not allow untrusted code to terminate the JVM
• EXP00-J. Do not ignore values returned by methods
• EXP01-J. Do not use a null in a case where an object is required
• EXP02-J. Do not use the Object.equals() method to compare two arrays
• EXP03-J. Do not use the equality operators when comparing values of boxed primitives
• EXP04-J. Do not pass arguments to certain Java Collections Framework methods that are a different type than the collection parameter type
• EXP05-J. Do not follow a write by a subsequent write or read of the same object within an expression
• EXP06-J. Expressions used in assertions must not produce side effects
• EXP07-J. Prevent loss of useful data due to weak references
• FIO00-J. Do not operate on files in shared directories
• FIO01-J. Create files with appropriate access permissions
• FIO02-J. Detect and handle file-related errors
• FIO03-J. Remove temporary files before termination
• FIO04-J. Release resources when they are no longer needed
• FIO05-J. Do not expose buffers or their backing arrays methods to untrusted code
• FIO06-J. Do not create multiple buffered wrappers on a single byte or character stream
• FIO07-J. Do not let external processes block on IO buffers
• FIO08-J. Distinguish between characters or bytes read from a stream and -1
• FIO09-J. Do not rely on the write() method to output integers outside the range 0 to 255
• FIO10-J. Ensure the array is filled when using read() to fill an array
• FIO11-J. Do not convert between strings and bytes without specif