Security
Recipes that find and eliminate vulnerable patterns in Java code.
Categories
Composite Recipes
Recipes that include further recipes, often including the individual recipes below.
- Java security best practices
- Remediate OWASP A01:2021 Broken access control
- Remediate OWASP A01:2025 Broken access control
- Remediate OWASP A02:2021 Cryptographic failures
- Remediate OWASP A02:2025 Security misconfiguration
- Remediate OWASP A03:2021 Injection
- Remediate OWASP A03:2025 Software supply chain failures
- Remediate OWASP A04:2025 Cryptographic failures
- Remediate OWASP A05:2025 Injection
- Remediate OWASP A07:2025 Identification and authentication failures
- Remediate OWASP A08:2021 Software and data integrity failures
- Remediate vulnerabilities from the OWASP Top Ten
Recipes
- Find text-direction changes
- Fix CWE-338 with
SecureRandom - Fix permissive
HostnameVerifierimplementations - Fix permissive
X509TrustManagerimplementations - Improper privilege management
- Partial path traversal vulnerability
- Regular Expression Denial of Service (ReDOS)
- Remediate OWASP A05:2021 Security misconfiguration
- Remediate OWASP A06:2021 Vulnerable and outdated components
- Remediate server-side request forgery (SSRF)
- Replace
Runtime.exec(String)withRuntime.exec(String[]) - Replace SQL string concatenation with a
PreparedStatement - Secure random
- SecureRandom seeds are not constant or predictable
- Upgrade inadequate cryptographic key sizes
- Use
Files#createTempDirectory - Use secure temporary file creation
- XML parser XXE vulnerability
- Zip slip