How does making string as immutable helps with securing information ? How does String Pool pose a security threat ?

Javasearch.buggybread.com

Search Interview Questions

More than 3000 questions in repository.

There are more than 900 unanswered questions.
Click here and help us by providing the answer.

Have a video suggestion.
Click Correct / Improve and please let us know.

Submit Question

Interview Questions and Answers

Q1. How does making string as immutable helps with securing information ? How does String Pool pose a security threat ?

Ans. String is widely used as parameter for many java classes, e.g. network connection, opening files, etc. Making it mutable might possess threats due to interception by the other code segment or hacker over internet.

Once a String constant is created in Java , it stays in string constant pool until garbage collected and hence stays there much longer than what's needed. Any unauthorized access to string Pool pose a threat of exposing these values.

Help us improve. Please let us know the company, where you were asked this question :

_{Like Discuss Correct / Improve Security String pool string immutable immutability expert rare}

Related Questions

What are different ways to create String Object? Explain.

Why Char array is preferred over String for storing password?

What is a String Pool ?

Which memory segment holds String Pool in Java ?

How and Why Strings are interned in Java ?

What will be the output of following code

Integer x = 1;
Integer y = 2;
System.out.println(x == y);

What if you change 1 to "1" and Integer to String?

What will be result of following code and why

Integer int1 = 1;
Integer int2 = 1;
String str1 = new String("str");
String str2 = new String("str");
String str3 = "str";
String str4 = "str";

System.out.println(int1 == int2);
System.out.println(str1 == str2);
System.out.println(str3 == str4);

What is the purpose of String Pool ? Don't you think it's a performance overhead to have unnecessary check for string in string pool ?

Why string pool concept has been introduced in string ?