Security aspects of standalone utilities in java

Security aspects of java application development

• make sure the utility does not accept any file input that can be used in edit (write) mode, this way hacker can pass some system files to corrupt the system
• Do not store any confidential data of the client/project in string literals because string literals are placed in perm heap space and hence these objects can be dumped to expose all the information
• Handle all passwords in character arrays as string literals are a security threat (same explanation as above)
• Do not construct SQL queries from any property files without prepared statement as they are prone to SQL injection attacks.