Insecure inherited permissions

ID

scala.perm.scala_perm_rule_dangerouspermissions

Severity

low

Remediation Complexity

trivial

Remediation Risk

low

Remediation Effort

low

Resource

Perm

Language

Scala

Description

Do not grant dangerous combinations of permissions.

Rationale

Do not grant dangerous combinations of permissions.

The following code illustrates a vulnerable pattern detected by this rule:

def danger(cs: CodeSource): Unit = {
  val pc: PermissionCollection = super.getPermissions(cs)
  // VULNERABLE: Insecure inherited permissions
  pc.add(new ReflectPermission("suppressAccessChecks"))
}

Remediation

Follow secure coding practices and review the references below for detailed remediation guidance.

Configuration

This detector does not need any configuration.

References