JAVA白盒安全测试需要关注的API

根据AppScan Source规则和安全知识库，JAVA白盒安全测试需要关注的API有：

java.beans.XMLDecoder.readObject
java.io.BufferedReader.readLine
java.io.DataInput.readFully
java.io.DataInput.readLine
java.io.DataInput.readShort
java.io.DataInputStream.readByte
java.io.DataInputStream.readFully
java.io.DataInputStream.readLine
java.io.DataInputStream.readShort
java.io.LineNumberReader.readLine
java.io.ObjectInput.readObject
java.io.ObjectInputStream.readFully
java.io.ObjectInputStream.readLine
java.io.ObjectInputStream.readObject
java.io.ObjectInputStream.readShort
java.io.OutputStream.write
java.io.PrintStream.print
java.io.PrintStream.println
java.io.PrintStream.write
java.io.PrintWriter.print
java.io.PrintWriter.println
java.io.PrintWriter.write
java.io.RandomAccessFile.readFully
java.io.RandomAccessFile.readLine
java.io.RandomAccessFile.readShort
java.io.Writer.write
java.lang.Class.forName
java.lang.Class.newInstance
java.lang.Package.getPackage
java.lang.Runtime.exit
java.lang.Runtime.load
java.lang.Runtime.loadLibrary
java.lang.System.currentTimeMillis
java.lang.System.exit
java.lang.System.load
java.lang.System.loadLibrary
java.lang.Throwable.getLocalizedMessage
java.lang.Throwable.getMessage
java.lang.Throwable.printStackTrace
java.lang.Throwable.toString
java.lang.reflect.Constructor.newInstance
java.lang.reflect.Field.get
java.lang.reflect.Field.getAnnotation
java.lang.reflect.Field.getBoolean
java.lang.reflect.Field.getByte
java.lang.reflect.Field.getChar
java.lang.reflect.Field.getDeclaredAnnotations
java.lang.reflect.Field.getDeclaringClass
java.lang.reflect.Field.getDouble
java.lang.reflect.Field.getFloat
java.lang.reflect.Field.getGenericType
java.lang.reflect.Field.getInt
java.lang.reflect.Field.getLong
java.lang.reflect.Field.getModifiers
java.lang.reflect.Field.getName
java.lang.reflect.Field.getShort
java.lang.reflect.Field.getType
java.lang.reflect.Field.getTypeName
java.lang.reflect.Field.set
java.lang.reflect.Field.setBoolean
java.lang.reflect.Field.setByte
java.lang.reflect.Field.setChar
java.lang.reflect.Field.setDouble
java.lang.reflect.Field.setFloat
java.lang.reflect.Field.setInt
java.lang.reflect.Field.setLong
java.lang.reflect.Field.setShort
java.lang.reflect.InvocationHandler.invoke
java.lang.reflect.Method.invoke
java.security.AccessController.doPrivileged
java.security.AuthProvider.login
java.security.SecureRandom.
java.security.cert.X509CRL.getIssuerDN
java.security.cert.X509Certificate.getIssuerDN
java.security.cert.X509Certificate.getSubjectDN
java.sql.Connection.close
java.sql.Connection.prepareStatement
java.sql.ResultSet.getString
java.sql.SQLInput.readObject
java.sql.SQLInput.readShort
java.sql.Statement.executeQuery
java.util.Date.getTime
java.util.concurrent.atomic.AtomicIntegerFieldUpdater.newUpdater
java.util.concurrent.atomic.AtomicLongFieldUpdater.newUpdater
java.util.concurrent.atomic.AtomicReferenceFieldUpdater.newUpdater
javax.imageio.stream.ImageInputStream.readFully
javax.imageio.stream.ImageInputStream.readShort
javax.jms.BytesMessage.readShort
javax.jms.StreamMessage.readObject
javax.jms.StreamMessage.readShort
javax.rmi.CORBA.StubDelegate.readObject
javax.servlet.ServletRequest.getParameter
javax.servlet.ServletRequest.getParameterMap
javax.servlet.ServletRequest.getParameterNames
javax.servlet.ServletRequest.getParameterValues
javax.servlet.ServletRequestWrapper.getParameter
javax.servlet.ServletRequestWrapper.getParameterMap
javax.servlet.ServletRequestWrapper.getParameterNames
javax.servlet.ServletRequestWrapper.getParameterValues
javax.servlet.http.HttpServletRequest.getHeader
javax.servlet.http.HttpServletRequest.getHeaderNames
javax.servlet.http.HttpServletRequestWrapper.getHeaders
javax.servlet.jsp.JspWriter.print
javax.servlet.jsp.JspWriter.println
javax.sql.PooledConnection.close
javax.sql.rowset.BaseRowSet.setFetchSize
javax.sql.rowset.BaseRowSet.setMaxFieldSize
javax.sql.rowset.BaseRowSet.setMaxRows
javax.sql.rowset.CachedRowSet.setPageSize
javax.swing.JEditorPane.getText
javax.swing.JPasswordField.getText
javax.swing.text.JTextComponent.getText
org.apache.log4j.jdbc.JDBCAppender.close
org.apache.struts.upload.BufferedMultipartInputStream.readLine
org.apache.xalan.lib.sql.PooledConnection.close
org.apache.xalan.lib.sql.XConnection.close
org.hibernate.Hibernate.close
org.hibernate.ScrollableResults.close
org.hibernate.Session.close
org.hibernate.SessionFactory.close
org.hibernate.StatelessSession.close
org.hibernate.connection.C3P0ConnectionProvider.close
org.hibernate.connection.C3P0ConnectionProvider.closeConnection
org.hibernate.connection.ConnectionProvider.close
org.hibernate.connection.ConnectionProvider.closeConnection
org.hibernate.connection.DatasourceConnectionProvider.close
org.hibernate.connection.DatasourceConnectionProvider.closeConnection
org.hibernate.connection.DriverManagerConnectionProvider.close
org.hibernate.connection.DriverManagerConnectionProvider.closeConnection
org.hibernate.connection.ProxoolConnectionProvider.close
org.hibernate.connection.ProxoolConnectionProvider.closeConnection
org.hibernate.connection.UserSuppliedConnectionProvider.close
org.hibernate.connection.UserSuppliedConnectionProvider.closeConnection
org.hibernate.impl.SessionFactoryImpl.close
org.hibernate.impl.SessionImpl.close
org.hibernate.impl.StatelessSessionImpl.close
org.hibernate.jdbc.ConnectionManager.close
org.hibernate.jmx.SessionFactoryStub.close
org.jfree.data.jdbc.JDBCPieDataset.close
org.jfree.data.jdbc.JDBCXYDataset.close
sun.jdbc.odbc.JdbcOdbcConnection.close
sun.jdbc.odbc.ee.PooledConnection.close