124-java-secure-coding

Identify and apply Java secure coding practices to reduce vulnerabilities, protect sensitive data, and harden application behaviour against common attack vectors.

Prerequisites: Run ./mvnw compile or mvn compile before applying any changes. If compilation fails, stop immediately — do not proceed until the project is in a valid state.

Core areas: Input validation with type, length, format, and range checks; SQL/OS/LDAP injection defence via PreparedStatement and parameterized APIs; attack surface minimisation through least-privilege permissions and removal of unused features; strong cryptographic algorithms for hashing (passwords with BCrypt/Argon2), encryption (AES-GCM), and digital signatures while avoiding deprecated ciphers (MD5, SHA-1, DES...

當您需要應用 Java 安全編碼最佳實踐時使用 - 包括驗證不受信任的輸入、透過參數化查詢防禦注入攻擊、透過最小權限最小化攻擊面、應用強大的加密演算法、安全處理異常而不暴露敏感資料、在執行時間管理機密、避免不安全的反序列化以及對輸出進行編碼以防止 XSS。 java 技能專案的一部分 來源：jabrena/cursor-rules-java。