Apache MyFaces JSF-2.2 Core Impl - FindBugs Bug Detector Report

JSF Implementations

Core JSF-2.2
- API
- Impl
- Shared
- Bundle
Core JSF-2.1
Core JSF-2.0
Core JSF-1.2
Core JSF-1.1

UI-Component Sets

Add-ons and Extensions

Documentation

Project Documentation

Foundation

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is low

Effort is min

Summary

Classes	Bugs	Errors	Missing Classes
1108	638	0	2

Files

Class	Bugs
org.apache.myfaces.application.ApplicationImpl	8
org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry	2
org.apache.myfaces.application.DefaultResourceHandlerSupport	3
org.apache.myfaces.application.NavigationHandlerImpl	4
org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator	1
org.apache.myfaces.application.ResourceHandlerImpl	3
org.apache.myfaces.application.jsp.ServletViewResponseWrapper	1
org.apache.myfaces.application.viewstate.IntByteArraySerializedViewKey	2
org.apache.myfaces.application.viewstate.IntIntSerializedViewKey	1
org.apache.myfaces.application.viewstate.RandomKeyFactory	1
org.apache.myfaces.application.viewstate.SecureRandomKeyFactory	1
org.apache.myfaces.application.viewstate.SerializedViewCollection	5
org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl	2
org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl$1	1
org.apache.myfaces.cdi.dependent.DependentBeanEntry	1
org.apache.myfaces.cdi.dependent.DependentInstanceEntry	1
org.apache.myfaces.cdi.util.CDIExternalArtifactResolver	2
org.apache.myfaces.cdi.util.ContextualInstanceInfo	2
org.apache.myfaces.cdi.util.ContextualStorage	3
org.apache.myfaces.cdi.view.ViewScopeBeanHolder	4
org.apache.myfaces.cdi.view.ViewScopeContextualStorage	4
org.apache.myfaces.cdi.view._ContextualKey	1
org.apache.myfaces.config.DefaultFacesConfigurationMerger$1	1
org.apache.myfaces.config.FacesConfigValidator	1
org.apache.myfaces.config.FacesConfigurator	3
org.apache.myfaces.config.NamedEventManager	1
org.apache.myfaces.config.annotation.AnnotationConfigurator	4
org.apache.myfaces.config.annotation.DefaultAnnotationProvider	5
org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider	3
org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider	4
org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter	3
org.apache.myfaces.config.annotation._PackageInfo	1
org.apache.myfaces.config.annotation._PackageInfo$1	1
org.apache.myfaces.config.element.ConfigOthersSlot	1
org.apache.myfaces.config.element.FacesConfigNameSlot	1
org.apache.myfaces.config.element.facelets.FaceletBehaviorTag	1
org.apache.myfaces.config.element.facelets.FaceletComponentTag	1
org.apache.myfaces.config.element.facelets.FaceletConverterTag	1
org.apache.myfaces.config.element.facelets.FaceletHandlerTag	1
org.apache.myfaces.config.element.facelets.FaceletSourceTag	1
org.apache.myfaces.config.element.facelets.FaceletValidatorTag	1
org.apache.myfaces.config.impl.FacesConfigEntityResolver	1
org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl	81
org.apache.myfaces.config.impl.digester.elements.AbsoluteOrderingImpl	3
org.apache.myfaces.config.impl.digester.elements.ApplicationImpl	18
org.apache.myfaces.config.impl.digester.elements.AttributeImpl	6
org.apache.myfaces.config.impl.digester.elements.BehaviorImpl	4
org.apache.myfaces.config.impl.digester.elements.ClientBehaviorRendererImpl	2
org.apache.myfaces.config.impl.digester.elements.ComponentImpl	2
org.apache.myfaces.config.impl.digester.elements.ComponentTagDeclarationImpl	2
org.apache.myfaces.config.impl.digester.elements.ConfigOthersSlotImpl	2
org.apache.myfaces.config.impl.digester.elements.ContractMappingImpl	3
org.apache.myfaces.config.impl.digester.elements.ConverterImpl	4
org.apache.myfaces.config.impl.digester.elements.FacesConfig	1
org.apache.myfaces.config.impl.digester.elements.FacesConfigExtensionImpl	3
org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl	36
org.apache.myfaces.config.impl.digester.elements.FacesConfigNameSlotImpl	2
org.apache.myfaces.config.impl.digester.elements.FacesFlowCallImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowDefinitionImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowMethodCallImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowMethodParameterImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowParameterImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowReferenceImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowReturnImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowSwitchImpl	1
org.apache.myfaces.config.impl.digester.elements.FacesFlowViewImpl	1
org.apache.myfaces.config.impl.digester.elements.FactoryImpl	17
org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl	3
org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl$Entry	1
org.apache.myfaces.config.impl.digester.elements.LocaleConfigImpl	3
org.apache.myfaces.config.impl.digester.elements.ManagedBeanImpl	3
org.apache.myfaces.config.impl.digester.elements.ManagedPropertyImpl	2
org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl	3
org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl$Entry	1
org.apache.myfaces.config.impl.digester.elements.NamedEventImpl	2
org.apache.myfaces.config.impl.digester.elements.NavigationCaseImpl	2
org.apache.myfaces.config.impl.digester.elements.NavigationRuleImpl	3
org.apache.myfaces.config.impl.digester.elements.OrderSlotImpl	2
org.apache.myfaces.config.impl.digester.elements.OrderingImpl	4
org.apache.myfaces.config.impl.digester.elements.PropertyImpl	6
org.apache.myfaces.config.impl.digester.elements.RedirectImpl	3
org.apache.myfaces.config.impl.digester.elements.RenderKitImpl	5
org.apache.myfaces.config.impl.digester.elements.RendererImpl	2
org.apache.myfaces.config.impl.digester.elements.ResourceBundleImpl	2
org.apache.myfaces.config.impl.digester.elements.SystemEventListenerImpl	2
org.apache.myfaces.config.impl.digester.elements.ViewParamImpl	2
org.apache.myfaces.config.impl.digester.elements.ViewPoolMappingImpl	3
org.apache.myfaces.config.impl.digester.elements.ViewPoolParameterImpl	1
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletBehaviorTagImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletComponentTagImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletConverterTagImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletFunctionImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletHandlerTagImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletSourceTagImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagImpl	2
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagLibraryImpl	4
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletValidatorTagImpl	2
org.apache.myfaces.config.util.Vertex	1
org.apache.myfaces.context.FacesContextFactoryImpl	2
org.apache.myfaces.context.MyFacesExceptionHandlerWrapperImpl	1
org.apache.myfaces.context.PartialResponseWriterImpl$StackEntry	1
org.apache.myfaces.context.RequestViewMetadata	5
org.apache.myfaces.context.servlet.PartialViewContextImpl	1
org.apache.myfaces.context.servlet.PartialViewContextImpl$PhaseAwareVisitCallback	1
org.apache.myfaces.context.servlet.ServletExternalContextImpl	2
org.apache.myfaces.ee6.MyFacesContainerInitializer	1
org.apache.myfaces.el.CompositeELResolver	2
org.apache.myfaces.el.ResolverForJSPInitializer	1
org.apache.myfaces.el.convert.ValueBindingToValueExpression	1
org.apache.myfaces.el.unified.CustomFirstELResolverComparator	1
org.apache.myfaces.el.unified.CustomLastELResolverComparator	1
org.apache.myfaces.el.unified.OpenWebBeansELResolverComparator	1
org.apache.myfaces.el.unified.ResolverBuilderBase	1
org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper	2
org.apache.myfaces.el.unified.resolver.ResourceBundleResolver	1
org.apache.myfaces.event.PostClientWindowAndViewInitializedEvent	1
org.apache.myfaces.flow.FlowHandlerImpl	1
org.apache.myfaces.flow.FlowReference	1
org.apache.myfaces.flow.NavigationCaseImpl	1
org.apache.myfaces.flow.cdi.ClientWindowFacesFlowLRUMap	2
org.apache.myfaces.flow.cdi.FacesFlowClientWindowCollection	1
org.apache.myfaces.flow.cdi.FlowScopeBeanHolder	4
org.apache.myfaces.lifecycle.CODIClientSideWindow	2
org.apache.myfaces.lifecycle.DefaultRestoreViewSupport	1
org.apache.myfaces.lifecycle.RenderResponseExecutor	2
org.apache.myfaces.lifecycle.RestoreViewExecutor	1
org.apache.myfaces.logging.MyfacesLogMessage	1
org.apache.myfaces.renderkit.ErrorPageWriter	8
org.apache.myfaces.renderkit.ErrorPageWriter$ErrorPageBean	1
org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback	3
org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer	2
org.apache.myfaces.renderkit.html.HtmlFormatRenderer	1
org.apache.myfaces.renderkit.html.HtmlHiddenRenderer	1
org.apache.myfaces.renderkit.html.HtmlScriptRenderer	2
org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer	2
org.apache.myfaces.resource.TempDirFileCacheContractResourceLoader	3
org.apache.myfaces.resource.TempDirFileCacheResourceLoader	5
org.apache.myfaces.shared_impl.util.serial.SerialFactory	1
org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser	1
org.apache.myfaces.spi.AnnotationProvider	2
org.apache.myfaces.spi.AnnotationProviderWrapper	3
org.apache.myfaces.spi.FactoryFinderProviderFactory	2
org.apache.myfaces.spi.ServiceProviderFinder	1
org.apache.myfaces.spi.impl.CDIAnnotationDelegateInjectionProvider	2
org.apache.myfaces.spi.impl.DefaultServiceProviderFinder	1
org.apache.myfaces.spi.impl.NoInjectionAnnotationInjectionProvider	3
org.apache.myfaces.spi.impl.ResourceAnnotationInjectionProvider	4
org.apache.myfaces.spi.impl.Tomcat7AnnotationInjectionProvider	1
org.apache.myfaces.taglib.core.ConverterImplTag	1
org.apache.myfaces.taglib.core.ConverterTag	1
org.apache.myfaces.taglib.core.DelegateConverter	1
org.apache.myfaces.taglib.core.DelegateValidator	1
org.apache.myfaces.taglib.core.DelegateValueChangeListener	1
org.apache.myfaces.taglib.core.LoadBundleTag$BundleMap	1
org.apache.myfaces.taglib.core.PhaseListenerTag	1
org.apache.myfaces.taglib.core.SetPropertyActionListenerTag	1
org.apache.myfaces.taglib.core.ValidatorImplTag	2
org.apache.myfaces.taglib.core.ValidatorTag	2
org.apache.myfaces.util.ExternalSpecifications	4
org.apache.myfaces.util.IllegalXmlCharacterFilterWriter	2
org.apache.myfaces.view.ViewDeclarationLanguageFactoryImpl	2
org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy	1
org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy$AddComponentCallback	1
org.apache.myfaces.view.facelets.DynamicComponentRefreshTransientBuildEvent	1
org.apache.myfaces.view.facelets.FaceletDynamicComponentRefreshTransientBuildEvent	1
org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage	3
org.apache.myfaces.view.facelets.FaceletsVDLUtils$KeyComparator	1
org.apache.myfaces.view.facelets.PostBuildComponentTreeOnRestoreViewEvent	1
org.apache.myfaces.view.facelets.StateWriter	1
org.apache.myfaces.view.facelets.ViewPoolProcessor	8
org.apache.myfaces.view.facelets.compiler.AddFacesMessageInstruction	1
org.apache.myfaces.view.facelets.compiler.FaceletsCompilerSupport	1
org.apache.myfaces.view.facelets.compiler.SAXCompiler	2
org.apache.myfaces.view.facelets.compiler.SAXCompiler$1	1
org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompilationHandler	2
org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompositeComponentMetadataHandler	2
org.apache.myfaces.view.facelets.compiler.SAXCompiler$ViewMetadataHandler	2
org.apache.myfaces.view.facelets.compiler.TagLibraryConfig	1
org.apache.myfaces.view.facelets.compiler.TagLibraryConfigUnmarshallerImpl$LibraryHandler	1
org.apache.myfaces.view.facelets.compiler.TextUnit	1
org.apache.myfaces.view.facelets.compiler.UILeaf	1
org.apache.myfaces.view.facelets.component.JsfElementRenderer	2
org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent	2
org.apache.myfaces.view.facelets.el.ContextAwareELException	1
org.apache.myfaces.view.facelets.el.ContextAwareException	1
org.apache.myfaces.view.facelets.el.ContextAwareMethodNotFoundException	1
org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotFoundException	1
org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotWritableException	1
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException	1
org.apache.myfaces.view.facelets.el.DefaultFunctionMapper	1
org.apache.myfaces.view.facelets.el.ELText	2
org.apache.myfaces.view.facelets.el.ELText$ELCacheableTextVariable	1
org.apache.myfaces.view.facelets.el.ELText$LiteralValueExpression	1
org.apache.myfaces.view.facelets.el.ResourceELUtils	1
org.apache.myfaces.view.facelets.el.ResourceLocationValueExpression	1
org.apache.myfaces.view.facelets.impl.DefaultFaceletContext	1
org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager	3
org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory	7
org.apache.myfaces.view.facelets.impl.FaceletCompositionContextImpl	1
org.apache.myfaces.view.facelets.impl.SectionUniqueIdCounter	1
org.apache.myfaces.view.facelets.impl.TemplateContextImpl	1
org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateClientKnownParameterMap	1
org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateManagerImpl	2
org.apache.myfaces.view.facelets.pool.impl.DynamicViewKey	1
org.apache.myfaces.view.facelets.pool.impl.MetadataViewKeyImpl	2
org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler	2
org.apache.myfaces.view.facelets.tag.CompositeTagDecorator	1
org.apache.myfaces.view.facelets.tag.CompositeTagLibrary	1
org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler	4
org.apache.myfaces.view.facelets.tag.MetaRulesetImpl	2
org.apache.myfaces.view.facelets.tag.MetadataImpl	1
org.apache.myfaces.view.facelets.tag.MethodRule	1
org.apache.myfaces.view.facelets.tag.MethodRule$MethodExpressionMetadata	1
org.apache.myfaces.view.facelets.tag.TagAttributeImpl	3
org.apache.myfaces.view.facelets.tag.TagAttributesImpl	3
org.apache.myfaces.view.facelets.tag.UserTagHandler	3
org.apache.myfaces.view.facelets.tag.composite.ClientBehaviorRedirectEventComponentWrapper	1
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentBeanInfo	1
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$LiteralAttributeMetadata	1
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$TypedLiteralAttributeMetadata	1
org.apache.myfaces.view.facelets.tag.jsf.ActionSourceRule	1
org.apache.myfaces.view.facelets.tag.jsf.BehaviorTagHandlerDelegate	1
org.apache.myfaces.view.facelets.tag.jsf.ComponentRule$LiteralAttributeMetadata	1
org.apache.myfaces.view.facelets.tag.jsf.ComponentSupport	2
org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate	3
org.apache.myfaces.view.facelets.tag.jsf.ConverterTagHandlerDelegate	1
org.apache.myfaces.view.facelets.tag.jsf.FaceletState	2
org.apache.myfaces.view.facelets.tag.jsf.ValidatorTagHandlerDelegate	1
org.apache.myfaces.view.facelets.tag.jsf.core.ActionListenerHandler	1
org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler	2
org.apache.myfaces.view.facelets.tag.jsf.core.AttributeHandler	1
org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler	2
org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap	1
org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry	2
org.apache.myfaces.view.facelets.tag.jsf.core.ResetValuesActionListenerHandler	1
org.apache.myfaces.view.facelets.tag.jsf.core.SelectItemsHandler	1
org.apache.myfaces.view.facelets.tag.jsf.core.SetPropertyActionListenerHandler	1
org.apache.myfaces.view.facelets.tag.jsf.core.ValueChangeListenerHandler	1
org.apache.myfaces.view.facelets.tag.jsf.html.DefaultTagDecorator	1
org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler	1
org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler$ArrayIterator	1
org.apache.myfaces.view.facelets.tag.jstl.core.IterationState	2
org.apache.myfaces.view.facelets.tag.jstl.core.IterationStatusExpression	1
org.apache.myfaces.view.facelets.tag.jstl.core.LegacyForEachHandler$ArrayIterator	1
org.apache.myfaces.view.facelets.tag.jstl.core.LegacySetHandler	1
org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry	2
org.apache.myfaces.view.facelets.tag.jstl.core.SetHandler	1
org.apache.myfaces.view.facelets.tag.jstl.fn.JstlFunction	3
org.apache.myfaces.view.facelets.tag.ui.CompositionHandler	3
org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener	2
org.apache.myfaces.view.facelets.tag.ui.InsertHandler	1
org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler	3
org.apache.myfaces.view.facelets.tag.ui.RepeatHandler$TagMetaData	1
org.apache.myfaces.view.facelets.tag.ui.UIDebug	1
org.apache.myfaces.view.facelets.tag.ui.UIDebug$1	1
org.apache.myfaces.view.facelets.util.Classpath	5
org.apache.myfaces.view.facelets.util.ReflectionUtil	4
org.apache.myfaces.view.facelets.util.Resource	1
org.apache.myfaces.view.jsp.JspViewDeclarationLanguage	2
org.apache.myfaces.webapp.AbstractFacesInitializer	5
org.apache.myfaces.webapp.Jsp20FacesInitializer$ErrorExpressionFactory	1
org.apache.myfaces.webapp.MyFacesServlet	1

org.apache.myfaces.application.ApplicationImpl

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	288	Low
Synchronization performed on java.util.concurrent.ConcurrentHashMap in org.apache.myfaces.application.ApplicationImpl.subscribeToEvent(Class, Class, SystemEventListener)	MT_CORRECTNESS	JLM_JSR166_UTILCONCURRENT_MONITORENTER	992	Medium
Load of known null value in org.apache.myfaces.application.ApplicationImpl.publishEvent(FacesContext, Class, Class, Object)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	595	Low
Method call in org.apache.myfaces.application.ApplicationImpl.internalCreateConverter(Class) passes null for nonnull parameter of setConverterProperties(Class, Converter)	CORRECTNESS	NP_NULL_PARAM_DEREF	1664	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl.internalCreateConverter(Class)	STYLE	REC_CATCH_EXCEPTION	1648	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl._createEvent(Class, Object, SystemEvent)	STYLE	REC_CATCH_EXCEPTION	2180	Low
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl.createBehavior(String)	STYLE	REC_CATCH_EXCEPTION	1214	Low
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl.internalCreateConverter(Class)	STYLE	REC_CATCH_EXCEPTION	1668	Low

org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry

Bug	Category	Details	Line	Priority
Inconsistent synchronization of org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry._lstSystemEventListener; locked 42% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	2784	Medium
Inconsistent synchronization of org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry._sourceClassMap; locked 40% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	2779	Medium

org.apache.myfaces.application.DefaultResourceHandlerSupport

Bug	Category	Details	Line	Priority
org.apache.myfaces.application.DefaultResourceHandlerSupport.getContractResourceLoaders() may expose internal representation by returning DefaultResourceHandlerSupport._contractResourceLoaders	MALICIOUS_CODE	EI_EXPOSE_REP	168	Medium
org.apache.myfaces.application.DefaultResourceHandlerSupport.getResourceLoaders() may expose internal representation by returning DefaultResourceHandlerSupport._resourceLoaders	MALICIOUS_CODE	EI_EXPOSE_REP	132	Medium
org.apache.myfaces.application.DefaultResourceHandlerSupport.getViewResourceLoaders() may expose internal representation by returning DefaultResourceHandlerSupport._viewResourceLoaders	MALICIOUS_CODE	EI_EXPOSE_REP	192	Medium

org.apache.myfaces.application.NavigationHandlerImpl

Bug	Category	Details	Line	Priority
Dead store to sourceFlow in org.apache.myfaces.application.NavigationHandlerImpl.applyFlowTransition(FacesContext, NavigationHandlerImpl$NavigationContext)	STYLE	DLS_DEAD_LOCAL_STORE	352	Low
integral division result cast to double or float in org.apache.myfaces.application.NavigationHandlerImpl.getOutcomeNavigationCase(FacesContext, String, String)	STYLE	ICAST_IDIV_CAST_TO_DOUBLE	1111	Medium
Inconsistent synchronization of org.apache.myfaces.application.NavigationHandlerImpl._wildcardPatterns; locked 50% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	1358	Low
Possible null pointer dereference of navigationContext in org.apache.myfaces.application.NavigationHandlerImpl.applyFlowTransition(FacesContext, NavigationHandlerImpl$NavigationContext)	CORRECTNESS	NP_NULL_ON_SOME_PATH	338	Medium

org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator

Bug	Category	Details	Line	Priority
org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator implements Comparator but not Serializable	BAD_PRACTICE	SE_COMPARATOR_SHOULD_BE_SERIALIZABLE	1500-1504	Medium

org.apache.myfaces.application.ResourceHandlerImpl

Bug	Category	Details	Line	Priority
Redundant nullcheck of resourceName, which is known to be non-null in org.apache.myfaces.application.ResourceHandlerImpl.deriveResourceMeta(FacesContext, ContractResourceLoader, String, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	1450	Low
Redundant nullcheck of resourceName, which is known to be non-null in org.apache.myfaces.application.ResourceHandlerImpl.deriveResourceMeta(FacesContext, ResourceLoader, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	1275	Low
Redundant nullcheck of resourceBasePath, which is known to be non-null in org.apache.myfaces.application.ResourceHandlerImpl.handleResourceRequest(FacesContext)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	541	Low

org.apache.myfaces.application.jsp.ServletViewResponseWrapper

Bug	Category	Details	Line	Priority
org.apache.myfaces.application.jsp.ServletViewResponseWrapper.toString() may return null	BAD_PRACTICE	NP_TOSTRING_COULD_RETURN_NULL	177	Medium

org.apache.myfaces.application.viewstate.IntByteArraySerializedViewKey

Bug	Category	Details	Line	Priority
org.apache.myfaces.application.viewstate.IntByteArraySerializedViewKey is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	34-68	Low

org.apache.myfaces.application.viewstate.IntIntSerializedViewKey

Bug	Category	Details	Line	Priority

org.apache.myfaces.application.viewstate.RandomKeyFactory

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.application.viewstate.RandomKeyFactory.decode(String) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	106	Low

org.apache.myfaces.application.viewstate.SecureRandomKeyFactory

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.application.viewstate.SecureRandomKeyFactory.decode(String) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	128	Low

org.apache.myfaces.application.viewstate.SerializedViewCollection

Bug	Category	Details	Line	Priority
Inconsistent synchronization of org.apache.myfaces.application.viewstate.SerializedViewCollection._lastWindowKeys; locked 57% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	269	Medium
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _keys	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _lastWindowKeys	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _precedence	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _serializedViews	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	506	Low
Repeated conditional test in org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl.saveSerializedViewInServletSession(FacesContext, Object)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	287	Low

org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl$1

Bug	Category	Details	Line	Priority
The class org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl$1 could be refactored into a named _static_ inner class	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC_ANON	570-574	Low

org.apache.myfaces.cdi.dependent.DependentBeanEntry

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.cdi.dependent.DependentBeanEntry defines non-transient non-serializable instance field bean	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium

org.apache.myfaces.cdi.dependent.DependentInstanceEntry

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.cdi.dependent.DependentInstanceEntry defines non-transient non-serializable instance field creationalContext	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium

org.apache.myfaces.cdi.util.CDIExternalArtifactResolver

Bug	Category	Details	Line	Priority
Null pointer dereference of CDIExternalArtifactResolver.managedConvertersEnabled in org.apache.myfaces.cdi.util.CDIExternalArtifactResolver.isManagedConvertersEnabled()	CORRECTNESS	NP_ALWAYS_NULL	60	High
Null pointer dereference of CDIExternalArtifactResolver.managedValidatorsEnabled in org.apache.myfaces.cdi.util.CDIExternalArtifactResolver.isManagedValidatorsEnabled()	CORRECTNESS	NP_ALWAYS_NULL	101	High

org.apache.myfaces.cdi.util.ContextualInstanceInfo

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.cdi.util.ContextualInstanceInfo defines non-transient non-serializable instance field creationalContext	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium
org.apache.myfaces.cdi.util.ContextualInstanceInfo is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	31-75	Low

org.apache.myfaces.cdi.util.ContextualStorage

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.enterprise.context.spi.Contextual<T> to javax.enterprise.inject.spi.PassivationCapable in org.apache.myfaces.cdi.util.ContextualStorage.getBeanKey(Contextual)	STYLE	BC_UNCONFIRMED_CAST	152	Low
Class org.apache.myfaces.cdi.util.ContextualStorage defines non-transient non-serializable instance field beanManager	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium
Class org.apache.myfaces.cdi.util.ContextualStorage defines non-transient non-serializable instance field contextualInstances	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

org.apache.myfaces.cdi.view.ViewScopeBeanHolder

Bug	Category	Details	Line	Priority
Method call in org.apache.myfaces.cdi.view.ViewScopeBeanHolder.destroyBeans(String) passes null for nonnull parameter of ViewScopeContextImpl.destroyAllActive(ViewScopeContextualStorage, FacesContext)	CORRECTNESS	NP_NULL_PARAM_DEREF	170	Medium
Class org.apache.myfaces.cdi.view.ViewScopeBeanHolder defines non-transient non-serializable instance field applicationContextBean	BAD_PRACTICE	SE_BAD_FIELD	Not available	High
Class org.apache.myfaces.cdi.view.ViewScopeBeanHolder defines non-transient non-serializable instance field storageMap	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.cdi.view.ViewScopeBeanHolder is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	53-236	Low

org.apache.myfaces.cdi.view.ViewScopeContextualStorage

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.enterprise.context.spi.Contextual<T> to javax.enterprise.inject.spi.PassivationCapable in org.apache.myfaces.cdi.view.ViewScopeContextualStorage.getBeanKey(Contextual)	STYLE	BC_UNCONFIRMED_CAST	116	Low
Class org.apache.myfaces.cdi.view.ViewScopeContextualStorage defines non-transient non-serializable instance field contextualInstances	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.cdi.view.ViewScopeContextualStorage defines non-transient non-serializable instance field nameBeanKeyMap	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
The field org.apache.myfaces.cdi.view.ViewScopeContextualStorage.beanManager is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low

org.apache.myfaces.cdi.view._ContextualKey

Bug	Category	Details	Line	Priority
org.apache.myfaces.cdi.view._ContextualKey is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	32-71	Low

org.apache.myfaces.config.DefaultFacesConfigurationMerger$1

Bug	Category	Details	Line	Priority
The class org.apache.myfaces.config.DefaultFacesConfigurationMerger$1 could be refactored into a named _static_ inner class	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC_ANON	831-874	Low

org.apache.myfaces.config.FacesConfigValidator

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.myfaces.config.FacesConfigValidator.validateNavRule(NavigationRule, List, ExternalContext)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	110	Medium

org.apache.myfaces.config.FacesConfigurator

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	830	Low
Write to static field org.apache.myfaces.config.FacesConfigurator.lastUpdate from instance method org.apache.myfaces.config.FacesConfigurator.configure()	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	619	Medium

org.apache.myfaces.config.NamedEventManager

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	126	Low

org.apache.myfaces.config.annotation.AnnotationConfigurator

Bug	Category	Details	Line	Priority
Redundant nullcheck of value, which is known to be non-null in org.apache.myfaces.config.annotation.AnnotationConfigurator.createFacesConfig(Map)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	124	Low
Redundant nullcheck of value, which is known to be non-null in org.apache.myfaces.config.annotation.AnnotationConfigurator.createFacesConfig(Map)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	209	Low
Repeated conditional test in org.apache.myfaces.config.annotation.AnnotationConfigurator.createFacesConfig(Map)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	124	Low
Repeated conditional test in org.apache.myfaces.config.annotation.AnnotationConfigurator.createFacesConfig(Map)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	209	Low

org.apache.myfaces.config.annotation.DefaultAnnotationProvider

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getAnnotatedMetaInfClasses(ExternalContext, Set) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	293-313	High
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getBaseUrls() is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	238-255	High
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getBaseUrls() is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	252	High
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getBaseUrls(ExternalContext) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	261-287	High
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	420	Low

org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider

Bug	Category	Details	Line	Priority
The parameter metadata to org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider.createDeclaredMethodBeansMap(ClassLoader, Map) is dead upon entry but overwritten	CORRECTNESS	IP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN	76	Low
Load of known null value in org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider.getDeclaredMethodBeansMap()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	66	Medium
Redundant nullcheck of methods, which is known to be non-null in org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider.postConstruct(Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	121	Low

org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.lookupFieldResource(Context, Object, Field, String) invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	193	Low
org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.lookupMethodResource(Context, Object, Method, String) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	229	Low
The parameter metadata to org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.createDeclaredFieldBeansMap(ClassLoader, Map) is dead upon entry but overwritten	CORRECTNESS	IP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN	77	Low
Load of known null value in org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.getDeclaredFieldBeansMap()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	67	Medium

org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter

Bug	Category	Details	Line	Priority
Method org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter.couldContainAnnotationsOnClassDef(DataInput, Set) uses the same code for two switch clauses	STYLE	DB_DUPLICATE_SWITCH_CLAUSES	144-145	Low
Method org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter.couldContainAnnotationsOnClassDef(DataInput, Set) uses the same code for two switch clauses	STYLE	DB_DUPLICATE_SWITCH_CLAUSES	151-153	Low
Dead store to minorVersion in org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter.couldContainAnnotationsOnClassDef(DataInput, Set)	STYLE	DLS_DEAD_LOCAL_STORE	107	Medium

org.apache.myfaces.config.annotation._PackageInfo

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	160	Low

org.apache.myfaces.config.annotation._PackageInfo$1

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	261	Low

org.apache.myfaces.config.element.ConfigOthersSlot

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.FacesConfigNameSlot

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.facelets.FaceletBehaviorTag

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.facelets.FaceletComponentTag

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.facelets.FaceletConverterTag

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.facelets.FaceletHandlerTag

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.facelets.FaceletSourceTag

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.element.facelets.FaceletValidatorTag

Bug	Category	Details	Line	Priority

org.apache.myfaces.config.impl.FacesConfigEntityResolver

Bug	Category	Details	Line	Priority
Method call in org.apache.myfaces.config.impl.FacesConfigEntityResolver.resolveEntity(String, String) passes null for nonnull parameter of java.util.jar.JarFile.getInputStream(ZipEntry)	CORRECTNESS	NP_NULL_PARAM_DEREF	92	High

org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field actionListeners	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field applicationFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field behaviors	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field clientWindowFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field componentTagDeclarations	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field components	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field converterByClass	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field converterById	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field converterConfigurationByClassName	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field defaultAnnotatedValidatorIds	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field defaultValidatorIds	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field elResolvers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field exceptionHandlerFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field externalContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field faceletCacheFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field faceletTagLibraries	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field faceletsProcessingByFileExtension	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field facesContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field facesFlowDefinitions	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field flashFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field flowHandlerFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field lifecycleFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field lifecyclePhaseListeners	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field managedBeans	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field namedEvents	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field navigationHandlers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field navigationRules	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field partialViewContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field propertyResolver	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field protectedViewUrlPatterns	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field renderKitFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field renderKits	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field resourceBundles	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field resourceHandlers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field resourceLibraryContractMappings	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field resourceResolvers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field stateManagers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field systemEventListeners	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field tagHandlerDelegateFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field validators	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field variableResolver	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field viewDeclarationLanguageFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field viewHandlers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field viewPoolMappings	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field visitContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umactionListeners is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umapplicationFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umbehaviors is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umclientWindowFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umcomponentTagDeclarations is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umelResolvers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umexceptionHandlerFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umexternalContextFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umfaceletCacheFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umfaceletTagLibraries is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umfacesContextFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umfacesFlowDefinitions is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umflashFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umflowHandlerFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umlifecycleFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umlifecyclePhaseListeners is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.ummanagedBeans is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umnamedEvents is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umnavigationHandlers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umnavigationRules is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umpartialViewContextFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umpropertyResolver is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umprotectedViewUrlPatterns is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umrenderKitFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umresourceBundles is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umresourceHandlers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umresourceLibraryContractMappings is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umresourceResolvers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umstateManagers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umsystemEventListeners is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umtagHandlerDelegateFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umvariableResolver is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umviewDeclarationLanguageFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umviewHandlers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umviewPoolMappings is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.umvisitContextFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low

org.apache.myfaces.config.impl.digester.elements.AbsoluteOrderingImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.AbsoluteOrderingImpl defines non-transient non-serializable instance field orderList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.AbsoluteOrderingImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	25-37	Low

org.apache.myfaces.config.impl.digester.elements.ApplicationImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field actionListener	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field defaultRenderkitId	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field defaultValidatorIds	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field elResolver	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field localeConfig	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field messageBundle	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field navigationHandler	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field partialTraversal	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field propertyResolver	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field resourceBundle	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field resourceHandler	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field resourceLibraryContractMappings	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field stateManager	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field systemEventListeners	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field variableResolver	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ApplicationImpl defines non-transient non-serializable instance field viewHandler	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.ApplicationImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29-224	Low

org.apache.myfaces.config.impl.digester.elements.AttributeImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.AttributeImpl defines non-transient non-serializable instance field _attributeExtension	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.AttributeImpl defines non-transient non-serializable instance field _description	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.AttributeImpl defines non-transient non-serializable instance field _displayName	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.AttributeImpl defines non-transient non-serializable instance field _icon	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.AttributeImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	42-171	Low

org.apache.myfaces.config.impl.digester.elements.BehaviorImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.BehaviorImpl defines non-transient non-serializable instance field attributes	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.BehaviorImpl defines non-transient non-serializable instance field properties	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.BehaviorImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29-77	Low

org.apache.myfaces.config.impl.digester.elements.ClientBehaviorRendererImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ClientBehaviorRendererImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27-52	Low

org.apache.myfaces.config.impl.digester.elements.ComponentImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ComponentImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27-54	Low

org.apache.myfaces.config.impl.digester.elements.ComponentTagDeclarationImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ComponentTagDeclarationImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35-87	Low

org.apache.myfaces.config.impl.digester.elements.ConfigOthersSlotImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ConfigOthersSlotImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	23	Low

org.apache.myfaces.config.impl.digester.elements.ContractMappingImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ContractMappingImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	30-99	Medium
The field org.apache.myfaces.config.impl.digester.elements.ContractMappingImpl.unmodifiableContractsList is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.ContractMappingImpl.unmodifiableUrlPatternList is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low

org.apache.myfaces.config.impl.digester.elements.ConverterImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.ConverterImpl defines non-transient non-serializable instance field _attributes	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.ConverterImpl defines non-transient non-serializable instance field _properties	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.ConverterImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	31-113	Low

org.apache.myfaces.config.impl.digester.elements.FacesConfig

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesConfig is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	25	Low

org.apache.myfaces.config.impl.digester.elements.FacesConfigExtensionImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigExtensionImpl defines non-transient non-serializable instance field _faceletsProcessingList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigExtensionImpl defines non-transient non-serializable instance field viewPoolMappings	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigExtensionImpl.unmodifiableViewPoolMappings is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low

org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field applications	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field behaviors	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field componentTagDeclarations	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field components	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field converters	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field faceletTagLibraryList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field facesConfigExtensions	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field facesFlowDefinitions	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field factories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field lifecyclePhaseListener	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field managedBeans	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field namedEvents	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field navigationRules	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field protectedViewsUrlPatternList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field renderKits	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field resourceResolvers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl defines non-transient non-serializable instance field validators	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	45-551	Medium
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableApplications is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableBehaviors is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableComponentTagDeclarations is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableComponents is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableConverters is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableFaceletTagLibraryList is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableFacesConfigExtensions is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableFacesFlowDefinitions is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableFactories is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableLifecyclePhaseListener is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableManagedBeans is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableNamedEvents is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableNavigationRules is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableProtectedViewsUrlPatternList is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableRenderKits is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableResourceResolvers is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low
The field org.apache.myfaces.config.impl.digester.elements.FacesConfigImpl.unmodifiableValidators is transient but isn't set by deserialization	BAD_PRACTICE	SE_TRANSIENT_FIELD_NOT_RESTORED	Not available	Low

org.apache.myfaces.config.impl.digester.elements.FacesConfigNameSlotImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesConfigNameSlotImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	23-36	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowCallImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowCallImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	38-73	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowDefinitionImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowDefinitionImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	52-206	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowMethodCallImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowMethodCallImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	38-90	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowMethodParameterImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowMethodParameterImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27-62	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowParameterImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowParameterImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	25-56	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowReferenceImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowReferenceImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35-59	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowReturnImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowReturnImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27-55	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowSwitchImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowSwitchImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-74	Low

org.apache.myfaces.config.impl.digester.elements.FacesFlowViewImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.FacesFlowViewImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	31-57	Low

org.apache.myfaces.config.impl.digester.elements.FactoryImpl

Bug	Category	Details	Line	Priority
The field name org.apache.myfaces.config.impl.digester.elements.FactoryImpl.ViewDeclarationLanguageFactories doesn't start with a lower case letter	BAD_PRACTICE	NM_FIELD_NAMING_CONVENTION	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field ViewDeclarationLanguageFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field applicationFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field clientWindowFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field exceptionHandlerFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field externalContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field faceletCacheFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field facesContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field flashFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field flowHandlerFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field lifecycleFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field partialViewContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field renderKitFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field tagHandlerDelegateFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.FactoryImpl defines non-transient non-serializable instance field visitContextFactories	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.FactoryImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	28-186	Low

org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl defines non-transient non-serializable instance field entries	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	30-63	Low

org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl$Entry

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ListEntriesImpl$Entry is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	63-90	Low

org.apache.myfaces.config.impl.digester.elements.LocaleConfigImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.LocaleConfigImpl defines non-transient non-serializable instance field supportedLocales	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.LocaleConfigImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29-56	Low

org.apache.myfaces.config.impl.digester.elements.ManagedBeanImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.ManagedBeanImpl defines non-transient non-serializable instance field property	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.ManagedBeanImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-197	Low

org.apache.myfaces.config.impl.digester.elements.ManagedPropertyImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ManagedPropertyImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35-140	Medium

org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl defines non-transient non-serializable instance field entries	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	30-74	Low

org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl$Entry

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.MapEntriesImpl$Entry is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	74-114	Low

org.apache.myfaces.config.impl.digester.elements.NamedEventImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.NamedEventImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	30-51	Low

org.apache.myfaces.config.impl.digester.elements.NavigationCaseImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.NavigationCaseImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	30-93	Low

org.apache.myfaces.config.impl.digester.elements.NavigationRuleImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.NavigationRuleImpl defines non-transient non-serializable instance field navigationCases	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.NavigationRuleImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29-57	Low

org.apache.myfaces.config.impl.digester.elements.OrderSlotImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.OrderSlotImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	23	Low

org.apache.myfaces.config.impl.digester.elements.OrderingImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.OrderingImpl defines non-transient non-serializable instance field afterList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.OrderingImpl defines non-transient non-serializable instance field beforeList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.OrderingImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	25-50	Low

org.apache.myfaces.config.impl.digester.elements.PropertyImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.PropertyImpl defines non-transient non-serializable instance field _description	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.PropertyImpl defines non-transient non-serializable instance field _displayName	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.PropertyImpl defines non-transient non-serializable instance field _icon	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.PropertyImpl defines non-transient non-serializable instance field _propertyExtension	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.PropertyImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	44-173	Low

org.apache.myfaces.config.impl.digester.elements.RedirectImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.RedirectImpl defines non-transient non-serializable instance field viewParams	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.RedirectImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	29-59	Low

org.apache.myfaces.config.impl.digester.elements.RenderKitImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.RenderKitImpl defines non-transient non-serializable instance field clientBehaviorRenderers	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.RenderKitImpl defines non-transient non-serializable instance field renderKitClasses	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.RenderKitImpl defines non-transient non-serializable instance field renderer	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.RenderKitImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	28-83	Low

org.apache.myfaces.config.impl.digester.elements.RendererImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.RendererImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27-68	Low

org.apache.myfaces.config.impl.digester.elements.ResourceBundleImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ResourceBundleImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	27-75	Low

org.apache.myfaces.config.impl.digester.elements.SystemEventListenerImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.SystemEventListenerImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	24-58	Low

org.apache.myfaces.config.impl.digester.elements.ViewParamImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ViewParamImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	24-47	Low

org.apache.myfaces.config.impl.digester.elements.ViewPoolMappingImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.ViewPoolMappingImpl defines non-transient non-serializable instance field _parameterList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.ViewPoolMappingImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	38-67	Low

org.apache.myfaces.config.impl.digester.elements.ViewPoolParameterImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.ViewPoolParameterImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	26-57	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletBehaviorTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletBehaviorTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	33-65	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletComponentTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletComponentTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35-84	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletConverterTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletConverterTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	33-65	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletFunctionImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletFunctionImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	34-72	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletHandlerTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletHandlerTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	32-48	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletSourceTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletSourceTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	32-48	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35-67	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagLibraryImpl

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagLibraryImpl defines non-transient non-serializable instance field functions	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagLibraryImpl defines non-transient non-serializable instance field tags	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletTagLibraryImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	37-103	Low

org.apache.myfaces.config.impl.digester.elements.facelets.FaceletValidatorTagImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.impl.digester.elements.facelets.FaceletValidatorTagImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	33-65	Low

org.apache.myfaces.config.util.Vertex

Bug	Category	Details	Line	Priority
org.apache.myfaces.config.util.Vertex defines compareTo(Vertex) and uses Object.equals()	BAD_PRACTICE	EQ_COMPARETO_USE_OBJECT_EQUALS	188-201	Medium

org.apache.myfaces.context.FacesContextFactoryImpl

Bug	Category	Details	Line	Priority
new org.apache.myfaces.context.FacesContextFactoryImpl() invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	85	Low
Redundant nullcheck of firstExternalContextInstance which is known to be null in new org.apache.myfaces.context.FacesContextFactoryImpl()	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE	89	Low

org.apache.myfaces.context.MyFacesExceptionHandlerWrapperImpl

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.event.SystemEvent to javax.faces.event.ExceptionQueuedEvent in org.apache.myfaces.context.MyFacesExceptionHandlerWrapperImpl.processEvent(SystemEvent)	STYLE	BC_UNCONFIRMED_CAST	331	Low

org.apache.myfaces.context.PartialResponseWriterImpl$StackEntry

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.context.PartialResponseWriterImpl$StackEntry be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	81-104	Medium

org.apache.myfaces.context.RequestViewMetadata

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.context.RequestViewMetadata defines non-transient non-serializable instance field addedResources	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.context.RequestViewMetadata defines non-transient non-serializable instance field initialAddedResources	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.context.RequestViewMetadata defines non-transient non-serializable instance field initialProcessedClasses	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.context.RequestViewMetadata defines non-transient non-serializable instance field processedClasses	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.context.RequestViewMetadata is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	40-174	Low

org.apache.myfaces.context.servlet.PartialViewContextImpl

Bug	Category	Details	Line	Priority
Redundant nullcheck of updatedComponents which is known to be null in org.apache.myfaces.context.servlet.PartialViewContextImpl.processPartialRendering(UIViewRoot, PhaseId)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE	513	Low

org.apache.myfaces.context.servlet.PartialViewContextImpl$PhaseAwareVisitCallback

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.context.servlet.PartialViewContextImpl$PhaseAwareVisitCallback be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	766-863	Medium

org.apache.myfaces.context.servlet.ServletExternalContextImpl

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in new org.apache.myfaces.context.servlet.ServletExternalContextImpl(ServletContext, ServletRequest, ServletResponse)	STYLE	BC_UNCONFIRMED_CAST	108	Low
Unchecked/unconfirmed cast from javax.servlet.ServletResponse to javax.servlet.http.HttpServletResponse in new org.apache.myfaces.context.servlet.ServletExternalContextImpl(ServletContext, ServletRequest, ServletResponse)	STYLE	BC_UNCONFIRMED_CAST	109	Low

org.apache.myfaces.ee6.MyFacesContainerInitializer

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.ee6.MyFacesContainerInitializer.isFacesConfigPresent(ServletContext)	STYLE	REC_CATCH_EXCEPTION	304	Low

org.apache.myfaces.el.CompositeELResolver

Bug	Category	Details	Line	Priority
Inconsistent synchronization of org.apache.myfaces.el.CompositeELResolver._elResolvers; locked 75% of time	MT_CORRECTNESS	IS2_INCONSISTENT_SYNC	42	Low

org.apache.myfaces.el.ResolverForJSPInitializer

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.el.ResolverForJSPInitializer defines non-transient non-serializable instance field _resolverForJSP	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

org.apache.myfaces.el.convert.ValueBindingToValueExpression

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.el.convert.ValueBindingToValueExpression defines non-transient non-serializable instance field _valueBinding	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium

org.apache.myfaces.el.unified.CustomFirstELResolverComparator

Bug	Category	Details	Line	Priority
org.apache.myfaces.el.unified.CustomFirstELResolverComparator implements Comparator but not Serializable	BAD_PRACTICE	SE_COMPARATOR_SHOULD_BE_SERIALIZABLE	39-101	Low

org.apache.myfaces.el.unified.CustomLastELResolverComparator

Bug	Category	Details	Line	Priority
org.apache.myfaces.el.unified.CustomLastELResolverComparator implements Comparator but not Serializable	BAD_PRACTICE	SE_COMPARATOR_SHOULD_BE_SERIALIZABLE	34-42	Low

org.apache.myfaces.el.unified.OpenWebBeansELResolverComparator

Bug	Category	Details	Line	Priority
org.apache.myfaces.el.unified.OpenWebBeansELResolverComparator implements Comparator but not Serializable	BAD_PRACTICE	SE_COMPARATOR_SHOULD_BE_SERIALIZABLE	33-50	Medium

org.apache.myfaces.el.unified.ResolverBuilderBase

Bug	Category	Details	Line	Priority
Redundant nullcheck of facesContext, which is known to be non-null in org.apache.myfaces.el.unified.ResolverBuilderBase.addFromRuntimeConfig(List)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	116	Low

org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	271-441	Medium
Method org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper.putAll(Map) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	425	Medium

org.apache.myfaces.el.unified.resolver.ResourceBundleResolver

Bug	Category	Details	Line	Priority
Redundant nullcheck of base which is known to be null in org.apache.myfaces.el.unified.resolver.ResourceBundleResolver.setValue(ELContext, Object, Object, Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE	70	Low

org.apache.myfaces.event.PostClientWindowAndViewInitializedEvent

Bug	Category	Details	Line	Priority
org.apache.myfaces.event.PostClientWindowAndViewInitializedEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	31-32	Low

org.apache.myfaces.flow.FlowHandlerImpl

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.myfaces.flow.FlowHandlerImpl.transition(FacesContext, Flow, Flow, FlowCallNode, String)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	261	Medium

org.apache.myfaces.flow.FlowReference

Bug	Category	Details	Line	Priority
org.apache.myfaces.flow.FlowReference is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	37-103	Low

org.apache.myfaces.flow.NavigationCaseImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.flow.NavigationCaseImpl.getCondition(FacesContext) has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	280	Medium

org.apache.myfaces.flow.cdi.ClientWindowFacesFlowLRUMap

Bug	Category	Details	Line	Priority
org.apache.myfaces.flow.cdi.ClientWindowFacesFlowLRUMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	34-79	Medium

org.apache.myfaces.flow.cdi.FacesFlowClientWindowCollection

Bug	Category	Details	Line	Priority
org.apache.myfaces.flow.cdi.FacesFlowClientWindowCollection is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	31-62	Low

org.apache.myfaces.flow.cdi.FlowScopeBeanHolder

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.flow.cdi.FlowScopeBeanHolder defines non-transient non-serializable instance field applicationContextBean	BAD_PRACTICE	SE_BAD_FIELD	Not available	High
Class org.apache.myfaces.flow.cdi.FlowScopeBeanHolder defines non-transient non-serializable instance field activeFlowMapKeys	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.flow.cdi.FlowScopeBeanHolder defines non-transient non-serializable instance field storageMap	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.flow.cdi.FlowScopeBeanHolder is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	85-351	Low

org.apache.myfaces.lifecycle.CODIClientSideWindow

Bug	Category	Details	Line	Priority
Dead store to existingParameters in org.apache.myfaces.lifecycle.CODIClientSideWindow.addParameters(ExternalContext, String, boolean, boolean, boolean)	STYLE	DLS_DEAD_LOCAL_STORE	334	Medium
Dead store to urlContainsWindowId in org.apache.myfaces.lifecycle.CODIClientSideWindow.addParameters(ExternalContext, String, boolean, boolean, boolean)	STYLE	DLS_DEAD_LOCAL_STORE	335	Medium

org.apache.myfaces.lifecycle.DefaultRestoreViewSupport

Bug	Category	Details	Line	Priority
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.lifecycle.DefaultRestoreViewSupport.deriveViewId(FacesContext, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	314	Low

org.apache.myfaces.lifecycle.RenderResponseExecutor

Bug	Category	Details	Line	Priority
Comparison of String objects using == or != in org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(FacesContext)	BAD_PRACTICE	ES_COMPARING_STRINGS_WITH_EQ	101	Low
Load of known null value in org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(FacesContext)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	101	Medium

org.apache.myfaces.lifecycle.RestoreViewExecutor

Bug	Category	Details	Line	Priority
Redundant nullcheck of viewRoot, which is known to be non-null in org.apache.myfaces.lifecycle.RestoreViewExecutor.execute(FacesContext)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	269	Low

org.apache.myfaces.logging.MyfacesLogMessage

Bug	Category	Details	Line	Priority
org.apache.myfaces.logging.MyfacesLogMessage is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	30-43	Low

org.apache.myfaces.renderkit.ErrorPageWriter

Bug	Category	Details	Line	Priority
Incorrect lazy initialization of static field org.apache.myfaces.renderkit.ErrorPageWriter.debugParts in org.apache.myfaces.renderkit.ErrorPageWriter._init(FacesContext)	MT_CORRECTNESS	LI_LAZY_INIT_STATIC	625-627	Low
Incorrect lazy initialization of static field org.apache.myfaces.renderkit.ErrorPageWriter.errorParts in org.apache.myfaces.renderkit.ErrorPageWriter._init(FacesContext)	MT_CORRECTNESS	LI_LAZY_INIT_STATIC	620-622	Low
org.apache.myfaces.renderkit.ErrorPageWriter.handleThrowable(FacesContext, Throwable) may fail to close stream	BAD_PRACTICE	OS_OPEN_STREAM	538	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._writeAttributes(Writer, UIComponent, boolean)	STYLE	REC_CATCH_EXCEPTION	1360	High
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._initCauseIfAvailable(Throwable, Throwable)	STYLE	REC_CATCH_EXCEPTION	1454	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._initCausePerReflection(Throwable, String)	STYLE	REC_CATCH_EXCEPTION	1435	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._writeAttributes(Writer, UIComponent, boolean)	STYLE	REC_CATCH_EXCEPTION	1339	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._writeAttributes(Writer, UIComponent, boolean)	STYLE	REC_CATCH_EXCEPTION	1339	Low

org.apache.myfaces.renderkit.ErrorPageWriter$ErrorPageBean

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter$ErrorPageBean.getErrorPageHtml()	STYLE	REC_CATCH_EXCEPTION	158	Low

org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback

Bug	Category	Details	Line	Priority
org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback.visit(VisitContext, UIComponent) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	1007	Low
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback.visit(VisitContext, UIComponent)	STYLE	REC_CATCH_EXCEPTION	1010	Medium

org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.behavior.ClientBehavior to javax.faces.component.behavior.AjaxBehavior in org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer.decode(FacesContext, UIComponent, ClientBehavior)	STYLE	BC_UNCONFIRMED_CAST	81	Low
Unchecked/unconfirmed cast from javax.faces.component.behavior.ClientBehavior to javax.faces.component.behavior.AjaxBehavior in org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer.getScript(ClientBehaviorContext, ClientBehavior)	STYLE	BC_UNCONFIRMED_CAST	95	Low

org.apache.myfaces.renderkit.html.HtmlFormatRenderer

Bug	Category	Details	Line	Priority
Check for sign of bitwise operation in org.apache.myfaces.renderkit.html.HtmlFormatRenderer.encodeEnd(FacesContext, UIComponent)	BAD_PRACTICE	BIT_SIGNED_CHECK	105	Medium

org.apache.myfaces.renderkit.html.HtmlHiddenRenderer

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.renderkit.html.HtmlHiddenRenderer.getConvertedValue(FacesContext, UIComponent, Object)	STYLE	BC_UNCONFIRMED_CAST	74	Low

org.apache.myfaces.renderkit.html.HtmlScriptRenderer

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.myfaces.renderkit.html.HtmlScriptRenderer.encodeEnd(FacesContext, UIComponent)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	228	Medium
Repeated conditional test in org.apache.myfaces.renderkit.html.HtmlScriptRenderer.processEvent(ComponentSystemEvent)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	101	Low

org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer.encodeEnd(FacesContext, UIComponent)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	203	Medium
Repeated conditional test in org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer.processEvent(ComponentSystemEvent)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	100	Low

org.apache.myfaces.resource.TempDirFileCacheContractResourceLoader

Bug	Category	Details	Line	Priority
org.apache.myfaces.resource.TempDirFileCacheContractResourceLoader.createTemporalFileVersion(FacesContext, ResourceMeta, File) ignores exceptional return value of java.io.File.delete()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	221	Medium
org.apache.myfaces.resource.TempDirFileCacheContractResourceLoader.createTemporalFileVersion(FacesContext, ResourceMeta, File) ignores exceptional return value of java.io.File.mkdirs()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	220	Medium
org.apache.myfaces.resource.TempDirFileCacheContractResourceLoader.initialize() ignores exceptional return value of java.io.File.mkdirs()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	87	Medium

org.apache.myfaces.resource.TempDirFileCacheResourceLoader

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.resource.TempDirFileCacheResourceLoader.isValidCreateTemporalFiles(FacesContext)	STYLE	REC_CATCH_EXCEPTION	105	Low
org.apache.myfaces.resource.TempDirFileCacheResourceLoader.createTemporalFileVersion(FacesContext, ResourceMeta, File) ignores exceptional return value of java.io.File.delete()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	266	Medium
org.apache.myfaces.resource.TempDirFileCacheResourceLoader.createTemporalFileVersion(FacesContext, ResourceMeta, File) ignores exceptional return value of java.io.File.mkdirs()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	265	Medium
org.apache.myfaces.resource.TempDirFileCacheResourceLoader.initialize() ignores exceptional return value of java.io.File.mkdirs()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	127	Medium
org.apache.myfaces.resource.TempDirFileCacheResourceLoader.isValidCreateTemporalFiles(FacesContext) ignores exceptional return value of java.io.File.mkdirs()	BAD_PRACTICE	RV_RETURN_VALUE_IGNORED_BAD_PRACTICE	101	Medium

org.apache.myfaces.shared_impl.util.serial.SerialFactory

Bug	Category	Details	Line	Priority

org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser.parse()	STYLE	REC_CATCH_EXCEPTION	114	Low

org.apache.myfaces.spi.AnnotationProvider

Bug	Category	Details	Line	Priority
org.apache.myfaces.spi.AnnotationProvider.getBaseUrls() is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	Not available	High
org.apache.myfaces.spi.AnnotationProvider.getBaseUrls(ExternalContext) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	112	High

org.apache.myfaces.spi.AnnotationProviderWrapper

Bug	Category	Details	Line	Priority
org.apache.myfaces.spi.AnnotationProviderWrapper.getBaseUrls() is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	52	High
org.apache.myfaces.spi.AnnotationProviderWrapper.getBaseUrls(ExternalContext) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	57	High

org.apache.myfaces.spi.FactoryFinderProviderFactory

Bug	Category	Details	Line	Priority
org.apache.myfaces.spi.FactoryFinderProviderFactory.setInstance(FactoryFinderProviderFactory) invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	152	Low
Exception is caught when Exception is not thrown in org.apache.myfaces.spi.FactoryFinderProviderFactory.setInstance(FactoryFinderProviderFactory)	STYLE	REC_CATCH_EXCEPTION	174	Low

org.apache.myfaces.spi.ServiceProviderFinder

Bug	Category	Details	Line	Priority
org.apache.myfaces.spi.ServiceProviderFinder.KNOWN_SERVICES is a mutable array	MALICIOUS_CODE	MS_MUTABLE_ARRAY	40	High

org.apache.myfaces.spi.impl.CDIAnnotationDelegateInjectionProvider

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in new org.apache.myfaces.spi.impl.CDIAnnotationDelegateInjectionProvider(ExternalContext)	STYLE	REC_CATCH_EXCEPTION	46	Medium

org.apache.myfaces.spi.impl.DefaultServiceProviderFinder

Bug	Category	Details	Line	Priority
org.apache.myfaces.spi.impl.DefaultServiceProviderFinder.getURLs(String) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	55-75	High

org.apache.myfaces.spi.impl.NoInjectionAnnotationInjectionProvider

Bug	Category	Details	Line	Priority
The parameter metadata to org.apache.myfaces.spi.impl.NoInjectionAnnotationInjectionProvider.createDeclaredMethodBeansMap(ClassLoader, Map) is dead upon entry but overwritten	CORRECTNESS	IP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN	78	Low
Load of known null value in org.apache.myfaces.spi.impl.NoInjectionAnnotationInjectionProvider.getDeclaredMethodBeansMap()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	68	Medium
Redundant nullcheck of methods, which is known to be non-null in org.apache.myfaces.spi.impl.NoInjectionAnnotationInjectionProvider.postConstruct(Object, Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	134	Low

org.apache.myfaces.spi.impl.ResourceAnnotationInjectionProvider

Bug	Category	Details	Line	Priority
org.apache.myfaces.spi.impl.ResourceAnnotationInjectionProvider.lookupFieldResource(Context, Object, Field, String) invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	193	Low
org.apache.myfaces.spi.impl.ResourceAnnotationInjectionProvider.lookupMethodResource(Context, Object, Method, String) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	229	Low
The parameter metadata to org.apache.myfaces.spi.impl.ResourceAnnotationInjectionProvider.createDeclaredFieldBeansMap(ClassLoader, Map) is dead upon entry but overwritten	CORRECTNESS	IP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN	77	Low
Load of known null value in org.apache.myfaces.spi.impl.ResourceAnnotationInjectionProvider.getDeclaredFieldBeansMap()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	67	Medium

org.apache.myfaces.spi.impl.Tomcat7AnnotationInjectionProvider

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.spi.impl.Tomcat7AnnotationInjectionProvider.isAvailable()	STYLE	REC_CATCH_EXCEPTION	158	Medium

org.apache.myfaces.taglib.core.ConverterImplTag

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ConverterImplTag.createClassicConverter()	STYLE	REC_CATCH_EXCEPTION	153	Low

org.apache.myfaces.taglib.core.ConverterTag

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ConverterTag.createConverter()	STYLE	REC_CATCH_EXCEPTION	124	Low

org.apache.myfaces.taglib.core.DelegateConverter

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.DelegateConverter._createConverter()	STYLE	REC_CATCH_EXCEPTION	157	Low

org.apache.myfaces.taglib.core.DelegateValidator

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.DelegateValidator._createValidator()	STYLE	REC_CATCH_EXCEPTION	136	Low

org.apache.myfaces.taglib.core.DelegateValueChangeListener

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.myfaces.taglib.core.DelegateValueChangeListener._createValueChangeListener()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	137	Low

org.apache.myfaces.taglib.core.LoadBundleTag$BundleMap

Bug	Category	Details	Line	Priority
Redundant nullcheck of java.util.ResourceBundle.getObject(String), which is known to be non-null in org.apache.myfaces.taglib.core.LoadBundleTag$BundleMap.containsKey(Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	186	Low

org.apache.myfaces.taglib.core.PhaseListenerTag

Bug	Category	Details	Line	Priority
org.apache.myfaces.taglib.core.PhaseListenerTag is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	48-144	Low

org.apache.myfaces.taglib.core.SetPropertyActionListenerTag

Bug	Category	Details	Line	Priority
org.apache.myfaces.taglib.core.SetPropertyActionListenerTag is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	41-140	Low

org.apache.myfaces.taglib.core.ValidatorImplTag

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ValidatorImplTag.createClassicValidator()	STYLE	REC_CATCH_EXCEPTION	151	Low
org.apache.myfaces.taglib.core.ValidatorImplTag is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	55-164	Low

org.apache.myfaces.taglib.core.ValidatorTag

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ValidatorTag.createValidator()	STYLE	REC_CATCH_EXCEPTION	107	Low
org.apache.myfaces.taglib.core.ValidatorTag is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-120	Low

org.apache.myfaces.util.ExternalSpecifications

Bug	Category	Details	Line	Priority
Incorrect lazy initialization and update of static field org.apache.myfaces.util.ExternalSpecifications.unifiedELAvailable in org.apache.myfaces.util.ExternalSpecifications.isUnifiedELAvailable()	MT_CORRECTNESS	LI_LAZY_INIT_UPDATE_STATIC	108-115	High
Incorrect lazy initialization and update of static field org.apache.myfaces.util.ExternalSpecifications.beanValidationAvailable in org.apache.myfaces.util.ExternalSpecifications.isBeanValidationAvailable()	MT_CORRECTNESS	LI_LAZY_INIT_UPDATE_STATIC	59-65	Medium
Incorrect lazy initialization and update of static field org.apache.myfaces.util.ExternalSpecifications.cdiAvailable in org.apache.myfaces.util.ExternalSpecifications.isCDIAvailable(ExternalContext)	MT_CORRECTNESS	LI_LAZY_INIT_UPDATE_STATIC	134-138	Medium
Incorrect lazy initialization and update of static field org.apache.myfaces.util.ExternalSpecifications.el3Available in org.apache.myfaces.util.ExternalSpecifications.isEL3Available()	MT_CORRECTNESS	LI_LAZY_INIT_UPDATE_STATIC	155-159	Medium

org.apache.myfaces.util.IllegalXmlCharacterFilterWriter

Bug	Category	Details	Line	Priority
Null pointer dereference of System.err in org.apache.myfaces.util.IllegalXmlCharacterFilterWriter.<static initializer>()	CORRECTNESS	NP_ALWAYS_NULL	54	High
Should org.apache.myfaces.util.IllegalXmlCharacterFilterWriter.encodeCharArray(char[], int, int) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	172	Low

org.apache.myfaces.view.ViewDeclarationLanguageFactoryImpl

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	135	Low
org.apache.myfaces.view.ViewDeclarationLanguageFactoryImpl._supportedLanguages is a volatile reference to an array; the array elements are non-volatile	MT_CORRECTNESS	VO_VOLATILE_REFERENCE_TO_ARRAY	Not available	Low

org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy

Bug	Category	Details	Line	Priority
Redundant nullcheck of state, which is known to be non-null in org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy.restoreView(FacesContext, String, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	276	Low

org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy$AddComponentCallback

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy$AddComponentCallback(Object[]) may expose internal representation by storing an externally mutable object into DefaultFaceletsStateManagementStrategy$AddComponentCallback.addedState	MALICIOUS_CODE	EI_EXPOSE_REP2	621	Medium

org.apache.myfaces.view.facelets.DynamicComponentRefreshTransientBuildEvent

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.DynamicComponentRefreshTransientBuildEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	34-40	Low

org.apache.myfaces.view.facelets.FaceletDynamicComponentRefreshTransientBuildEvent

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.FaceletDynamicComponentRefreshTransientBuildEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	34-40	Low

org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage.PARAMS_REFRESH_PERIOD should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	194	Medium
Load of known null value in org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage.buildView(FacesContext, UIViewRoot)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	377	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage.renderView(FacesContext, UIViewRoot)	STYLE	REC_CATCH_EXCEPTION	2022	Low

org.apache.myfaces.view.facelets.FaceletsVDLUtils$KeyComparator

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.FaceletsVDLUtils$KeyComparator implements Comparator but not Serializable	BAD_PRACTICE	SE_COMPARATOR_SHOULD_BE_SERIALIZABLE	93-97	Medium

org.apache.myfaces.view.facelets.PostBuildComponentTreeOnRestoreViewEvent

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.PostBuildComponentTreeOnRestoreViewEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	44-53	Low

org.apache.myfaces.view.facelets.StateWriter

Bug	Category	Details	Line	Priority
StateWriter.fast not initialized in constructor	STYLE	UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR	Not available	Low

org.apache.myfaces.view.facelets.ViewPoolProcessor

Bug	Category	Details	Line	Priority
Possible null pointer dereference of child in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearTransientAndNonFaceletComponents(FacesContext, UIComponent)	CORRECTNESS	NP_NULL_ON_SOME_PATH	730	Medium
Possible null pointer dereference of fc in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearTransientAndNonFaceletComponents(FacesContext, UIComponent)	CORRECTNESS	NP_NULL_ON_SOME_PATH	752	Medium
Possible null pointer dereference of child in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearTransientAndNonFaceletComponentsForDynamicView(FacesContext, UIViewRoot, ViewStructureMetadata)	CORRECTNESS	NP_NULL_ON_SOME_PATH	557	Medium
Nullcheck of elMode at line 171 of value previously dereferenced in org.apache.myfaces.view.facelets.ViewPoolProcessor.initialize(FacesContext)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	171	High
Nullcheck of child at line 627 of value previously dereferenced in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearComponentResourceContainer(FacesContext, UIComponent, List)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	627	Medium
Nullcheck of child at line 856 of value previously dereferenced in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearTransientAndRemoveNonResetableComponents(FacesContext, ViewPoolProcessor$ClearPartialTreeContext, UIComponent)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	856	Medium
Nullcheck of fc at line 922 of value previously dereferenced in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearTransientAndRemoveNonResetableComponents(FacesContext, ViewPoolProcessor$ClearPartialTreeContext, UIComponent)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	922	Medium
Nullcheck of child at line 777 of value previously dereferenced in org.apache.myfaces.view.facelets.ViewPoolProcessor.clearTransientAndRemoveNonResetableComponents(FacesContext, ViewPoolProcessor$ClearPartialTreeContext, UIViewRoot, ViewStructureMetadata)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	777	Medium

org.apache.myfaces.view.facelets.compiler.AddFacesMessageInstruction

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.el.ELContext to org.apache.myfaces.view.facelets.AbstractFaceletContext in org.apache.myfaces.view.facelets.compiler.AddFacesMessageInstruction.apply(ExpressionFactory, ELContext)	STYLE	BC_UNCONFIRMED_CAST	55	Low

org.apache.myfaces.view.facelets.compiler.FaceletsCompilerSupport

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.compiler.FaceletsCompilerSupport.loadDecorators(FacesContext, Compiler)	STYLE	REC_CATCH_EXCEPTION	188	Low

org.apache.myfaces.view.facelets.compiler.SAXCompiler

Bug	Category	Details	Line	Priority
Method call in org.apache.myfaces.view.facelets.compiler.SAXCompiler.doCompileComponent(String, String, Map) passes null for nonnull parameter of new org.apache.myfaces.view.facelets.tag.TagAttributeImpl(Location, String, String, String, String)	CORRECTNESS	NP_NULL_PARAM_DEREF	936	Medium
Method call in org.apache.myfaces.view.facelets.compiler.SAXCompiler.doCompileComponent(String, String, Map) passes null for nonnull parameter of new org.apache.myfaces.view.facelets.tag.TagAttributeImpl(Location, String, String, String, String)	CORRECTNESS	NP_NULL_PARAM_DEREF	961	Medium

org.apache.myfaces.view.facelets.compiler.SAXCompiler$1

Bug	Category	Details	Line	Priority
The class org.apache.myfaces.view.facelets.compiler.SAXCompiler$1 could be refactored into a named _static_ inner class	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC_ANON	810-814	Low

org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompilationHandler

Bug	Category	Details	Line	Priority
Repeated conditional test in org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompilationHandler.characters(char[], int, int)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	100	Low
SAXCompiler$CompilationHandler.locator not initialized in constructor	STYLE	UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR	Not available	Low

org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompositeComponentMetadataHandler

Bug	Category	Details	Line	Priority
Repeated conditional test in org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompositeComponentMetadataHandler.characters(char[], int, int)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	539	Low
SAXCompiler$CompositeComponentMetadataHandler.locator not initialized in constructor	STYLE	UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR	Not available	Low

org.apache.myfaces.view.facelets.compiler.SAXCompiler$ViewMetadataHandler

Bug	Category	Details	Line	Priority
Repeated conditional test in org.apache.myfaces.view.facelets.compiler.SAXCompiler$ViewMetadataHandler.characters(char[], int, int)	CORRECTNESS	RpC_REPEATED_CONDITIONAL_TEST	305	Low
SAXCompiler$ViewMetadataHandler.locator not initialized in constructor	STYLE	UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR	Not available	Low

org.apache.myfaces.view.facelets.compiler.TagLibraryConfig

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.compiler.TagLibraryConfig is final but declares protected field org.apache.myfaces.view.facelets.compiler.TagLibraryConfig.log	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.compiler.TagLibraryConfigUnmarshallerImpl$LibraryHandler

Bug	Category	Details	Line	Priority
TagLibraryConfigUnmarshallerImpl$LibraryHandler.locator not initialized in constructor	STYLE	UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR	Not available	Low

org.apache.myfaces.view.facelets.compiler.TextUnit

Bug	Category	Details	Line	Priority
Impossible cast from org.apache.myfaces.view.facelets.compiler.LiteralNonExcapedTextInstruction to org.apache.myfaces.view.facelets.compiler.LiteralTextInstruction in org.apache.myfaces.view.facelets.compiler.TextUnit.compressSpaces(List, int)	CORRECTNESS	BC_IMPOSSIBLE_CAST	589	High

org.apache.myfaces.view.facelets.compiler.UILeaf

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.view.facelets.compiler.UILeaf.getFacesListeners(Class) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	519	Low

org.apache.myfaces.view.facelets.component.JsfElementRenderer

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.view.facelets.component.JsfElement in org.apache.myfaces.view.facelets.component.JsfElementRenderer.encodeBegin(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	77	Low
Possible null pointer dereference of behaviors in org.apache.myfaces.view.facelets.component.JsfElementRenderer.encodeBegin(FacesContext, UIComponent)	CORRECTNESS	NP_NULL_ON_SOME_PATH	87	Medium

org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent is serializable but also an inner class of a non-serializable class	BAD_PRACTICE	SE_BAD_FIELD_INNER_CLASS	1369-1430	Low
org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	1369-1430	Low

org.apache.myfaces.view.facelets.el.ContextAwareELException

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwareELException._delegate	BAD_PRACTICE	SE_BAD_FIELD_STORE	51	Medium

org.apache.myfaces.view.facelets.el.ContextAwareException

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwareException._delegate	BAD_PRACTICE	SE_BAD_FIELD_STORE	45	Medium

org.apache.myfaces.view.facelets.el.ContextAwareMethodNotFoundException

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwareMethodNotFoundException._delegate	BAD_PRACTICE	SE_BAD_FIELD_STORE	51	Medium

org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotFoundException

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwarePropertyNotFoundException._delegate	BAD_PRACTICE	SE_BAD_FIELD_STORE	54	Medium

org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotWritableException

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwarePropertyNotWritableException._delegate	BAD_PRACTICE	SE_BAD_FIELD_STORE	43	Medium

org.apache.myfaces.view.facelets.el.DefaultContextAwareELException

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.el.DefaultContextAwareELException is not derived from an Exception, even though it is named as such	BAD_PRACTICE	NM_CLASS_NOT_EXCEPTION	28-66	Medium

org.apache.myfaces.view.facelets.el.DefaultFunctionMapper

Bug	Category	Details	Line	Priority

org.apache.myfaces.view.facelets.el.ELText

Bug	Category	Details	Line	Priority
Method call in org.apache.myfaces.view.facelets.el.ELText.parseAllowEmptyString(String) passes null for nonnull parameter of parse(ExpressionFactory, ELContext, String)	CORRECTNESS	NP_NULL_PARAM_DEREF	483	Medium
Should org.apache.myfaces.view.facelets.el.ELText.parseAsArray(ExpressionFactory, ELContext, String) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	653	Low

org.apache.myfaces.view.facelets.el.ELText$ELCacheableTextVariable

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.el.ELContext to org.apache.myfaces.view.facelets.AbstractFaceletContext in org.apache.myfaces.view.facelets.el.ELText$ELCacheableTextVariable.apply(ExpressionFactory, ELContext)	STYLE	BC_UNCONFIRMED_CAST	257	Low

org.apache.myfaces.view.facelets.el.ELText$LiteralValueExpression

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.el.ELText$LiteralValueExpression.equals(Object) always returns false	CORRECTNESS	EQ_ALWAYS_FALSE	80	High

org.apache.myfaces.view.facelets.el.ResourceELUtils

Bug	Category	Details	Line	Priority

org.apache.myfaces.view.facelets.el.ResourceLocationValueExpression

Bug	Category	Details	Line	Priority

org.apache.myfaces.view.facelets.impl.DefaultFaceletContext

Bug	Category	Details	Line	Priority
Bad attempt to compute absolute value of signed 32-bit hashcode in org.apache.myfaces.view.facelets.impl.DefaultFaceletContext.initPrefix()	CORRECTNESS	RV_ABSOLUTE_VALUE_OF_HASHCODE	299	High

org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager is final but declares protected field org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager._target	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager.equals(Object) is unusual	STYLE	EQ_UNUSUAL	724	Medium

org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory is final but declares protected field org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.log	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
new org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory(Compiler, ResourceResolver, long) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	153	Low
Redundant nullcheck of url, which is known to be non-null in org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.getCompositeComponentMetadataFacelet(FacesContext, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	543	Low
Redundant nullcheck of url, which is known to be non-null in org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.getFacelet(FacesContext, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	225	Low
Redundant nullcheck of url, which is known to be non-null in org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.getViewMetadataFacelet(FacesContext, String)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	489	Low
Exception is caught when Exception is not thrown in new org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory(Compiler, ResourceResolver, long)	STYLE	REC_CATCH_EXCEPTION	157	Low

org.apache.myfaces.view.facelets.impl.FaceletCompositionContextImpl

Bug	Category	Details	Line	Priority
Redundant nullcheck of id which is known to be null in org.apache.myfaces.view.facelets.impl.FaceletCompositionContextImpl.removeComponentForDeletion(UIComponent)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE	881	Low

org.apache.myfaces.view.facelets.impl.SectionUniqueIdCounter

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.impl.SectionUniqueIdCounter(String, String[]) may expose internal representation by storing an externally mutable object into SectionUniqueIdCounter._uniqueIdsCache	MALICIOUS_CODE	EI_EXPOSE_REP2	79	Medium

org.apache.myfaces.view.facelets.impl.TemplateContextImpl

Bug	Category	Details	Line	Priority
Call to equals() comparing different types in org.apache.myfaces.view.facelets.impl.TemplateContextImpl.includeDefinition(FaceletContext, Facelet, UIComponent, String)	CORRECTNESS	EC_UNRELATED_TYPES	132	High

org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateClientKnownParameterMap

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateClientKnownParameterMap.getAttribute(String) has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	480	Medium

org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateManagerImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateManagerImpl.equals(Object) is unusual	STYLE	EQ_UNUSUAL	237-243	Medium

org.apache.myfaces.view.facelets.pool.impl.DynamicViewKey

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.pool.impl.DynamicViewKey is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	33-67	Low

org.apache.myfaces.view.facelets.pool.impl.MetadataViewKeyImpl

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.pool.impl.MetadataViewKeyImpl(String, String, Locale, String[]) may expose internal representation by storing an externally mutable object into MetadataViewKeyImpl.contracts	MALICIOUS_CODE	EI_EXPOSE_REP2	52	Medium
org.apache.myfaces.view.facelets.pool.impl.MetadataViewKeyImpl is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	40-127	Low

org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler.getHandlers() may expose internal representation by returning CompositeFaceletHandler.children	MALICIOUS_CODE	EI_EXPOSE_REP	61	Medium
new org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler(FaceletHandler[]) may expose internal representation by storing an externally mutable object into CompositeFaceletHandler.children	MALICIOUS_CODE	EI_EXPOSE_REP2	46	Medium

org.apache.myfaces.view.facelets.tag.CompositeTagDecorator

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.tag.CompositeTagDecorator(TagDecorator[]) may expose internal representation by storing an externally mutable object into CompositeTagDecorator.decorators	MALICIOUS_CODE	EI_EXPOSE_REP2	41	Medium

org.apache.myfaces.view.facelets.tag.CompositeTagLibrary

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.tag.CompositeTagLibrary(TagLibrary[]) may expose internal representation by storing an externally mutable object into CompositeTagLibrary.libraries	MALICIOUS_CODE	EI_EXPOSE_REP2	44	Medium

org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler._handlers	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler._location	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler._vars	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Dead store to actx in org.apache.myfaces.view.facelets.tag.LegacyUserTagHandler.apply(FaceletContext, UIComponent, String)	STYLE	DLS_DEAD_LOCAL_STORE	155	Medium

org.apache.myfaces.view.facelets.tag.MetaRulesetImpl

Bug	Category	Details	Line	Priority
The parameter metadata to org.apache.myfaces.view.facelets.tag.MetaRulesetImpl.createMetaData(ClassLoader, Map) is dead upon entry but overwritten	CORRECTNESS	IP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN	97	Medium
Load of known null value in org.apache.myfaces.view.facelets.tag.MetaRulesetImpl.getMetaData()	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	88	Medium

org.apache.myfaces.view.facelets.tag.MetadataImpl

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.tag.MetadataImpl(Metadata[]) may expose internal representation by storing an externally mutable object into MetadataImpl._mappers	MALICIOUS_CODE	EI_EXPOSE_REP2	36	Medium

org.apache.myfaces.view.facelets.tag.MethodRule

Bug	Category	Details	Line	Priority
new org.apache.myfaces.view.facelets.tag.MethodRule(String, Class, Class[]) may expose internal representation by storing an externally mutable object into MethodRule.params	MALICIOUS_CODE	EI_EXPOSE_REP2	51	Medium

org.apache.myfaces.view.facelets.tag.MethodRule$MethodExpressionMetadata

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.view.facelets.tag.MethodRule$MethodExpressionMetadata be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	85-108	Medium

org.apache.myfaces.view.facelets.tag.TagAttributeImpl

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.tag.TagAttributeImpl.getMethodExpression(FaceletContext, Class, Class[])	STYLE	REC_CATCH_EXCEPTION	343	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.tag.TagAttributeImpl.getValueExpression(FaceletContext, Class)	STYLE	REC_CATCH_EXCEPTION	609	Low
org.apache.myfaces.view.facelets.tag.TagAttributeImpl.cachedExpression is a volatile reference to an array; the array elements are non-volatile	MT_CORRECTNESS	VO_VOLATILE_REFERENCE_TO_ARRAY	Not available	Low

org.apache.myfaces.view.facelets.tag.TagAttributesImpl

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.TagAttributesImpl.getAll() may expose internal representation by returning TagAttributesImpl._attributes	MALICIOUS_CODE	EI_EXPOSE_REP	98	Medium
org.apache.myfaces.view.facelets.tag.TagAttributesImpl.getNamespaces() may expose internal representation by returning TagAttributesImpl._namespaces	MALICIOUS_CODE	EI_EXPOSE_REP	177	Medium
new org.apache.myfaces.view.facelets.tag.TagAttributesImpl(TagAttribute[]) may expose internal representation by storing an externally mutable object into TagAttributesImpl._attributes	MALICIOUS_CODE	EI_EXPOSE_REP2	58	Medium

org.apache.myfaces.view.facelets.tag.UserTagHandler

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.UserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.UserTagHandler._handlers	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.UserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.UserTagHandler._location	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.UserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.UserTagHandler._vars	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.tag.composite.ClientBehaviorRedirectEventComponentWrapper

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.view.facelets.tag.composite.ClientBehaviorRedirectEventComponentWrapper.getFacesListeners(Class) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	427	Low

org.apache.myfaces.view.facelets.tag.composite.CompositeComponentBeanInfo

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentBeanInfo.getPropertyDescriptors() may expose internal representation by returning CompositeComponentBeanInfo._propertyDescriptorsArray	MALICIOUS_CODE	EI_EXPOSE_REP	145	Medium

org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$LiteralAttributeMetadata

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$LiteralAttributeMetadata be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	47-55	Medium

org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$TypedLiteralAttributeMetadata

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$TypedLiteralAttributeMetadata be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	65-74	Medium

org.apache.myfaces.view.facelets.tag.jsf.ActionSourceRule

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.jsf.ActionSourceRule.ACTION_LISTENER_SIG should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	44	Medium

org.apache.myfaces.view.facelets.tag.jsf.BehaviorTagHandlerDelegate

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.behavior.ClientBehaviorHolder in org.apache.myfaces.view.facelets.tag.jsf.BehaviorTagHandlerDelegate.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	152	Low

org.apache.myfaces.view.facelets.tag.jsf.ComponentRule$LiteralAttributeMetadata

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.view.facelets.tag.jsf.ComponentRule$LiteralAttributeMetadata be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	45-53	Medium

org.apache.myfaces.view.facelets.tag.jsf.ComponentSupport

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	422	Low
org.apache.myfaces.view.facelets.tag.jsf.ComponentSupport.<static initializer>() invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	66	Low

org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate

Bug	Category	Details	Line	Priority
Redundant nullcheck of parent, which is known to be non-null in org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate.apply(FaceletContext, UIComponent)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	388	Low
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate.createComponent(FaceletContext)	STYLE	REC_CATCH_EXCEPTION	531	Low

org.apache.myfaces.view.facelets.tag.jsf.ConverterTagHandlerDelegate

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ValueHolder in org.apache.myfaces.view.facelets.tag.jsf.ConverterTagHandlerDelegate.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	136	Low

org.apache.myfaces.view.facelets.tag.jsf.FaceletState

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.jsf.FaceletState defines non-transient non-serializable instance field bindingsMap	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.view.facelets.tag.jsf.FaceletState defines non-transient non-serializable instance field stateMap	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

org.apache.myfaces.view.facelets.tag.jsf.ValidatorTagHandlerDelegate

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.EditableValueHolder in org.apache.myfaces.view.facelets.tag.jsf.ValidatorTagHandlerDelegate.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	273	Low

org.apache.myfaces.view.facelets.tag.jsf.core.ActionListenerHandler

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.view.facelets.tag.jsf.core.ActionListenerHandler.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	193	Low

org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.behavior.ClientBehaviorHolder in org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	347	Low
org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler.AJAX_BEHAVIOR_LISTENER_SIG should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	90	Medium

org.apache.myfaces.view.facelets.tag.jsf.core.AttributeHandler

Bug	Category	Details	Line	Priority

org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler.name	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap.bundle	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry.key	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry.value	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.tag.jsf.core.ResetValuesActionListenerHandler

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.view.facelets.tag.jsf.core.ResetValuesActionListenerHandler.applyAttachedObject(FacesContext, UIComponent, boolean)	STYLE	BC_UNCONFIRMED_CAST	161	Low

org.apache.myfaces.view.facelets.tag.jsf.core.SelectItemsHandler

Bug	Category	Details	Line	Priority
Private method org.apache.myfaces.view.facelets.tag.jsf.core.SelectItemsHandler.getNoSelectionValue() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	55	Low

org.apache.myfaces.view.facelets.tag.jsf.core.SetPropertyActionListenerHandler

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.view.facelets.tag.jsf.core.SetPropertyActionListenerHandler.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	171	Low

org.apache.myfaces.view.facelets.tag.jsf.core.ValueChangeListenerHandler

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.EditableValueHolder in org.apache.myfaces.view.facelets.tag.jsf.core.ValueChangeListenerHandler.applyAttachedObject(FacesContext, UIComponent)	STYLE	BC_UNCONFIRMED_CAST	182	Low

org.apache.myfaces.view.facelets.tag.jsf.html.DefaultTagDecorator

Bug	Category	Details	Line	Priority
Private method org.apache.myfaces.view.facelets.tag.jsf.html.DefaultTagDecorator.isReservedJSFAttribute(String) is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	398-409	Low

org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler

Bug	Category	Details	Line	Priority
Load of known null value in org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler.removeVarAndVarStatus(PageContext, String, ValueExpression, String, ValueExpression)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	673	Medium

org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler$ArrayIterator

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler$ArrayIterator.next() can't throw NoSuchElementException	BAD_PRACTICE	IT_NO_SUCH_ELEMENT	90	Medium

org.apache.myfaces.view.facelets.tag.jstl.core.IterationState

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.jstl.core.IterationState defines non-transient non-serializable instance field valueList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.view.facelets.tag.jstl.core.IterationState is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	41-79	Low

org.apache.myfaces.view.facelets.tag.jstl.core.IterationStatusExpression

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.jstl.core.IterationStatusExpression.equals(Object) checks for operand being a IterationStatus	BAD_PRACTICE	EQ_CHECK_FOR_OPERAND_NOT_COMPATIBLE_WITH_THIS	113	High

org.apache.myfaces.view.facelets.tag.jstl.core.LegacyForEachHandler$ArrayIterator

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.tag.jstl.core.LegacyForEachHandler$ArrayIterator.next() can't throw NoSuchElementException	BAD_PRACTICE	IT_NO_SUCH_ELEMENT	86	Medium

org.apache.myfaces.view.facelets.tag.jstl.core.LegacySetHandler

Bug	Category	Details	Line	Priority
Nullcheck of LegacySetHandler.value at line 146 of value previously dereferenced in org.apache.myfaces.view.facelets.tag.jstl.core.LegacySetHandler.apply(FaceletContext, UIComponent)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	102	Medium

org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry defines non-transient non-serializable instance field src	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	39-56	Low

org.apache.myfaces.view.facelets.tag.jstl.core.SetHandler

Bug	Category	Details	Line	Priority
Nullcheck of SetHandler.value at line 171 of value previously dereferenced in org.apache.myfaces.view.facelets.tag.jstl.core.SetHandler.apply(FaceletContext, UIComponent)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	104	Medium

org.apache.myfaces.view.facelets.tag.jstl.fn.JstlFunction

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	59	Low
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	379	Low
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	394	Low

org.apache.myfaces.view.facelets.tag.ui.CompositionHandler

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.ui.CompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.CompositionHandler._handlers	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.ui.CompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.CompositionHandler._params	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.ui.CompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.CompositionHandler._template	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener defines non-transient non-serializable instance field _currentPhase	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener defines non-transient non-serializable instance field _visitCallback	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

org.apache.myfaces.view.facelets.tag.ui.InsertHandler

Bug	Category	Details	Line	Priority
Comparison of String parameter using == or != in org.apache.myfaces.view.facelets.tag.ui.InsertHandler.apply(FaceletContext, UIComponent, String)	BAD_PRACTICE	ES_COMPARING_PARAMETER_STRING_WITH_EQ	109	Low

org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler._handlers	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler._params	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low
Class org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.LegacyCompositionHandler._template	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.facelets.tag.ui.RepeatHandler$TagMetaData

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in new org.apache.myfaces.view.facelets.tag.ui.RepeatHandler$TagMetaData(RepeatHandler, Class)	STYLE	REC_CATCH_EXCEPTION	91	Low

org.apache.myfaces.view.facelets.tag.ui.UIDebug

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	241	Low

org.apache.myfaces.view.facelets.tag.ui.UIDebug$1

Bug	Category	Details	Line	Priority
The class org.apache.myfaces.view.facelets.tag.ui.UIDebug$1 could be refactored into a named _static_ inner class	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC_ANON	83-91	Low

org.apache.myfaces.view.facelets.util.Classpath

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.util.Classpath._searchDir(Set, File, String) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	131-168	High
org.apache.myfaces.view.facelets.util.Classpath._searchFromURL(Set, String, String, URL) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	187-252	High
org.apache.myfaces.view.facelets.util.Classpath._searchJar(ClassLoader, Set, JarFile, String, String) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	345-365	High
org.apache.myfaces.view.facelets.util.Classpath._searchResource(Set, ClassLoader, String, String, String) is or uses a map or set of URLs, which can be a performance hog	PERFORMANCE	DMI_COLLECTION_OF_URLS	79-127	High
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.util.Classpath._searchFromURL(Set, String, String, URL)	STYLE	REC_CATCH_EXCEPTION	227	Medium

org.apache.myfaces.view.facelets.util.ReflectionUtil

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.facelets.util.ReflectionUtil.PRIMITIVES should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	33	Medium
org.apache.myfaces.view.facelets.util.ReflectionUtil.PRIMITIVE_NAMES should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	30	Medium
Should org.apache.myfaces.view.facelets.util.ReflectionUtil.toTypeArray(String[]) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	100	Low
Should org.apache.myfaces.view.facelets.util.ReflectionUtil.toTypeNameArray(Class[]) return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	122	Low

org.apache.myfaces.view.facelets.util.Resource

Bug	Category	Details	Line	Priority
Class org.apache.myfaces.view.facelets.util.Resource is final but declares protected field org.apache.myfaces.view.facelets.util.Resource.log	STYLE	CI_CONFUSED_INHERITANCE	Not available	Low

org.apache.myfaces.view.jsp.JspViewDeclarationLanguage

Bug	Category	Details	Line	Priority
org.apache.myfaces.view.jsp.JspViewDeclarationLanguage.FACELETS_ONLY_F_TAGS should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	61	Medium
org.apache.myfaces.view.jsp.JspViewDeclarationLanguage.FACELETS_ONLY_H_TAGS should be package protected	MALICIOUS_CODE	MS_PKGPROTECT	62	Medium

org.apache.myfaces.webapp.AbstractFacesInitializer

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	235	Low
org.apache.myfaces.webapp.AbstractFacesInitializer.destroyFaces(ServletContext) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged block	BAD_PRACTICE	DP_DO_INSIDE_DO_PRIVILEGED	397	Low
Exception is caught when Exception is not thrown in org.apache.myfaces.webapp.AbstractFacesInitializer.lookupBeanManagerFromCDI()	STYLE	REC_CATCH_EXCEPTION	634	Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.webapp.AbstractFacesInitializer.initFaces(ServletContext)	STYLE	REC_CATCH_EXCEPTION	260	Low

org.apache.myfaces.webapp.Jsp20FacesInitializer$ErrorExpressionFactory

Bug	Category	Details	Line	Priority
Should org.apache.myfaces.webapp.Jsp20FacesInitializer$ErrorExpressionFactory be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	139-167	Medium

org.apache.myfaces.webapp.MyFacesServlet

Bug	Category	Details	Line	Priority
org.apache.myfaces.webapp.MyFacesServlet._facesInitializer is a mutable servlet field	MT_CORRECTNESS	MSF_MUTABLE_SERVLET_FIELD	55	Low