<dd id="sga4y"><optgroup id="sga4y"></optgroup></dd>

<nav id="sga4y"><code id="sga4y"></code></nav>

<optgroup id="sga4y"></optgroup>

Encapsulation

Encapsulation is about drawing strong boundaries. In a web browser that might mean ensuring that your mobile code cannot be abused by other mobile code. On the server it might mean differentiation between validated data and unvalidated data, between one user's data and another's, or between data users are allowed to see and data that they are not.

Contents

ABAP

• System Information Leak

ActionScript

• Flash Misconfiguration: Overly Permissive Cross-Domain Policy
• Flash Misconfiguration: Overly Permissive Custom Headers Policy
• Flash Misconfiguration: Policy Restrictions Bypass
• Flash Misconfiguration: Unauthorized Data Access
• System Information Leak

ColdFusion

• ColdFusion Bad Practices: Leftover Debug Code
• System Information Leak

COBOL

• System Information Leak

C/C++

• System Information Leak

C#/VB.NET/ASP.NET

• ASP.NET Bad Practices: Leftover Debug Code
• Cross-Site Request Forgery
• HTML5: Overly Permissive CORS Policy
• Hidden Field
• JavaScript Hijacking: Vulnerable Framework
• Poor Logging Practice: Use of a System Output Stream
• System Information Leak
• Trust Boundary Violation

HTML

• Cross-Site Request Forgery
• Hardcoded Domain in HTML
• Hidden Field

Java/JSP

• ADF Bad Practices: Default url-invoke-disallowed Setting
• Cross-Site Request Forgery
• HTML5: Overly Permissive CORS Policy
• Hidden Field
• Insecure Storage: Android Backup Storage
• Insecure Storage: Android External Storage
• Insecure Storage: Android World Readable or Writeable
• Insecure Transport
• J2EE Bad Practices: Leftover Debug Code
• JavaScript Hijacking: Ad Hoc Ajax
• JavaScript Hijacking: Vulnerable Framework
• Poor Logging Practice: Logger Not Declared Static Final
• Poor Logging Practice: Multiple Loggers
• Poor Logging Practice: Use of a System Output Stream
• Poor Style: Non-final Public Static Field
• System Information Leak
• System Information Leak: Apache Axis
• System Information Leak: Apache Axis 2
• System Information Leak: HTML Comment in JSP
• System Information Leak: Incomplete Servlet Error Handling
• System Information Leak: Overly Broad SQL Logging
• Trust Boundary Violation
• Unsafe Mobile Code: Access Violation
• Unsafe Mobile Code: Database Access
• Unsafe Mobile Code: Inner Class
• Unsafe Mobile Code: Public finalize() Method
• Unsafe Mobile Code: Unsafe Array Declaration
• Unsafe Mobile Code: Unsafe Public Field

Javascript

• Cross-Session Contamination
• Cross-Site Request Forgery
• HTML5: Overly Permissive Message Posting Policy
• JavaScript Hijacking: Ad Hoc Ajax

Objective-C

• Insecure Storage: Missing Encryption on Stored Private Media
• Insecure Transport
• Insecure Transport: HTTP GET

PHP

• HTML5: Overly Permissive CORS Policy
• Insecure Transport
• Insecure Transport: HTTP GET
• System Information Leak

Python

• HTML5: Overly Permissive CORS Policy
• System Information Leak

PLSQL/TSQL

• System Information Leak
• Trust Boundary Violation

VisualBasic/VBScript/ASP

• HTML5: Overly Permissive CORS Policy
• System Information Leak
• Trust Boundary Violation

Copyright 2013 Fortify Software - All rights reserved.
(Generated from version 2013.1.1.0008 of the Fortify Secure Coding Rulepacks)