FindBugs Bug Detector Report
The following document contains the results of FindBugs Report
FindBugs Version is 1.3.9
Threshold is low
Effort is min
Files
org.apache.myfaces.component.html.ext.AbstractHtmlDataTable
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Primitive boxed just to call toString in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.expandAllDetails() | PERFORMANCE | DM_BOXED_PRIMITIVE_TOSTRING | 1703 | Low |
Comparison of String objects using == or != in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.getRowStyle() | BAD_PRACTICE | ES_COMPARING_STRINGS_WITH_EQ | 1447 | Low |
Comparison of String objects using == or != in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.getRowStyleClass() | BAD_PRACTICE | ES_COMPARING_STRINGS_WITH_EQ | 1418 | Low |
Switch statement found in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.process(FacesContext, UIComponent, int) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 590-593 | Low |
org.apache.myfaces.component.html.ext.AbstractHtmlSelectManyCheckbox
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Private method org.apache.myfaces.component.html.ext.AbstractHtmlSelectManyCheckbox.booleanFromObject(Object, boolean) is never called | PERFORMANCE | UPM_UNCALLED_PRIVATE_METHOD | 101-110 | Low |
org.apache.myfaces.component.html.ext.BaseSortableModel$IntList
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.BaseSortableModel$IntList is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 244-252 | Low |
org.apache.myfaces.component.html.ext.BaseSortableModel$RowDataComparator
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.BaseSortableModel$RowDataComparator implements Comparator but not Serializable | BAD_PRACTICE | SE_COMPARATOR_SHOULD_BE_SERIALIZABLE | 257-274 | Low |
org.apache.myfaces.component.html.ext.HtmlDataTableHack
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Private method org.apache.myfaces.component.html.ext.HtmlDataTableHack.booleanFromObject(Object, boolean) is never called | PERFORMANCE | UPM_UNCALLED_PRIVATE_METHOD | 656-665 | Low |
org.apache.myfaces.component.html.ext.HtmlDataTableHack$EditableValueHolderState
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.component.html.ext.HtmlDataTableHack$EditableValueHolderState be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 591-604 | Medium |
org.apache.myfaces.component.html.ext.HtmlInputSecret
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlInputSecret.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlInputSecret.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlInputText
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlInputText.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 125 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlInputText.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 119 | Medium |
org.apache.myfaces.component.html.ext.HtmlInputTextarea
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlInputTextarea.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 101 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlInputTextarea.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 95 | Medium |
org.apache.myfaces.component.html.ext.HtmlPanelGrid
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlPanelGrid.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 70 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlPanelGrid.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 64 | Medium |
org.apache.myfaces.component.html.ext.HtmlPanelGroup
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlPanelGroup.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 413 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlPanelGroup.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 407 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectBooleanCheckbox
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectBooleanCheckbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectBooleanCheckbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectManyCheckbox
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectManyCheckbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 101 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectManyCheckbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 95 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectManyListbox
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectManyListbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectManyListbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectManyMenu
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectManyMenu.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectManyMenu.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectOneListbox
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectOneListbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectOneListbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectOneMenu
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectOneMenu.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectOneMenu.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectOneRadio
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.HtmlSelectOneRadio.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectOneRadio.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.SortCriterion
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.SortCriterion is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 31-75 | Low |
org.apache.myfaces.component.html.ext.SortableModel$Comp
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.component.html.ext.SortableModel$Comp be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 162-217 | Medium |
org.apache.myfaces.component.html.ext.SortableModel$Inverter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.component.html.ext.SortableModel$Inverter implements Comparator but not Serializable | BAD_PRACTICE | SE_COMPARATOR_SHOULD_BE_SERIALIZABLE | 228-234 | Low |
org.apache.myfaces.component.html.ext._SerializableDataModel
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.component.html.ext._SerializableDataModel defines non-transient non-serializable instance field _list | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
The field org.apache.myfaces.component.html.ext._SerializableDataModel._rowIndex is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Medium |
org.apache.myfaces.component.html.util.MultipartFilter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.component.html.util.MultipartFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 122 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 83 | Low |
Load of known null value in org.apache.myfaces.component.html.util.MultipartFilter.init(FilterConfig) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 69 | Medium |
org.apache.myfaces.component.html.util.StreamingAddResource
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to manager in org.apache.myfaces.component.html.util.StreamingAddResource.addStyleSheet(FacesContext, StreamingAddResource$StreamablePositionedInfo) | STYLE | DLS_DEAD_LOCAL_STORE | 603 | Medium |
Unread field: org.apache.myfaces.component.html.util.StreamingAddResource.REQUEST_ID_COUNTER | PERFORMANCE | URF_UNREAD_FIELD | 135 | Low |
org.apache.myfaces.custom.buffer.BufferRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.buffer.Buffer in org.apache.myfaces.custom.buffer.BufferRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 64 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.custom.buffer.BufferRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | REC_CATCH_EXCEPTION | 76 | Low |
org.apache.myfaces.custom.calendar.HtmlCalendarRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.calendar.HtmlInputCalendar in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 117 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.calendar.AbstractHtmlInputCalendar in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 1202 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIInput to org.apache.myfaces.custom.calendar.HtmlInputCalendar in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.writeLink(String, UIInput, FacesContext, Date) | STYLE | BC_UNCONFIRMED_CAST | 945 | Low |
Redundant nullcheck of textValue, which is known to be non-null in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 134 | Low |
org.apache.myfaces.custom.calendar.HtmlCalendarRenderer$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
The class org.apache.myfaces.custom.calendar.HtmlCalendarRenderer$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 346-353 | Low |
org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent.COMPONENT_FAMILY isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 36 | Low |
org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent.COMPONENT_TYPE isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 35 | Low |
org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent.DEFAULT_RENDERER_TYPE isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 37 | Low |
org.apache.myfaces.custom.captcha.CAPTCHARenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.captcha.CAPTCHAComponent in org.apache.myfaces.custom.captcha.CAPTCHARenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 69 | Low |
org.apache.myfaces.custom.captcha.util.CAPTCHAImageGenerator
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
integral division result cast to double or float in org.apache.myfaces.custom.captcha.util.CAPTCHAImageGenerator.getDelta(int, double, double, double) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 237 | Medium |
org.apache.myfaces.custom.captcha.util.CAPTCHATextGenerator
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.custom.captcha.util.CAPTCHATextGenerator.generateRandomText() concatenates strings using + in a loop | PERFORMANCE | SBSC_USE_STRINGBUFFER_CONCATENATION | 62 | Medium |
org.apache.myfaces.custom.captcha.util.ColorGenerator
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.custom.captcha.util.ColorGenerator.generateRandomColor(Color) uses the nextDouble method of Random to generate a random integer; using nextInt is more efficient | PERFORMANCE | DM_NEXTINT_VIA_NEXTDOUBLE | 45 | Medium |
org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanelRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanel in org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanelRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 131 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanel in org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanelRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 62 | Low |
org.apache.myfaces.custom.collapsiblepanel.HtmlHeaderLinkTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.collapsiblepanel.HtmlHeaderLinkTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 59 | Medium |
Dead store to context in org.apache.myfaces.custom.collapsiblepanel.HtmlHeaderLinkTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 63 | Medium |
org.apache.myfaces.custom.crosstable.UIColumns
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Switch statement found in org.apache.myfaces.custom.crosstable.UIColumns.process(FacesContext, UIComponent, int) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 484-487 | Low |
org.apache.myfaces.custom.crosstable.UIColumns$EditableValueHolderState
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.custom.crosstable.UIColumns$EditableValueHolderState be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 527-539 | Medium |
org.apache.myfaces.custom.datalist.AbstractHtmlDataList
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Switch statement found in org.apache.myfaces.custom.datalist.AbstractHtmlDataList.process(FacesContext, UIComponent, int) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 169-172 | Low |
org.apache.myfaces.custom.datalist.HtmlListRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.custom.datalist.HtmlListRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 119 | Low |
org.apache.myfaces.custom.datascroller.AbstractHtmlDataScroller
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Redundant nullcheck of uiData, which is known to be non-null in org.apache.myfaces.custom.datascroller.AbstractHtmlDataScroller.broadcast(FacesEvent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 256 | Low |
org.apache.myfaces.custom.datascroller.HtmlDataScroller
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.datascroller.HtmlDataScroller.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 973 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.datascroller.HtmlDataScroller.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 967 | Medium |
org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.datascroller.HtmlDataScroller in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 186 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.datascroller.HtmlDataScroller in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 199 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.datascroller.HtmlDataScroller in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 219 | Low |
Redundant nullcheck of org.apache.myfaces.custom.datascroller.AbstractHtmlDataScroller.getUIData(), which is known to be non-null in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 221 | Low |
org.apache.myfaces.custom.date.AbstractHtmlInputDate$UserData
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Potentially dangerous use of non-short-circuit logic in org.apache.myfaces.custom.date.AbstractHtmlInputDate$UserData.parse() | STYLE | NS_DANGEROUS_NON_SHORT_CIRCUIT | 202 | High |
org.apache.myfaces.custom.date.HtmlDateRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.date.HtmlInputDate in org.apache.myfaces.custom.date.HtmlDateRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 389 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.date.HtmlInputDate in org.apache.myfaces.custom.date.HtmlDateRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 91 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.date.HtmlInputDate in org.apache.myfaces.custom.date.HtmlDateRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 494 | Low |
org.apache.myfaces.custom.date.HtmlDateRenderer$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
The class org.apache.myfaces.custom.date.HtmlDateRenderer$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 373-380 | Low |
org.apache.myfaces.custom.div.DivRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.div.Div in org.apache.myfaces.custom.div.DivRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 56 | Low |
org.apache.myfaces.custom.document.AbstractDocumentRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.document.AbstractDocument in org.apache.myfaces.custom.document.AbstractDocumentRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 47 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.document.AbstractDocument in org.apache.myfaces.custom.document.AbstractDocumentRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 77 | Low |
org.apache.myfaces.custom.document.AbstractDocumentTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to context in org.apache.myfaces.custom.document.AbstractDocumentTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 69 | Medium |
org.apache.myfaces.custom.document.DocumentHeadTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.document.DocumentHeadTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
Dead store to context in org.apache.myfaces.custom.document.DocumentHeadTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.document.DocumentTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.document.DocumentTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
Dead store to context in org.apache.myfaces.custom.document.DocumentTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.dojo.DojoConfig
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.dojo.DojoConfig.ATTR_DOJO_TYPE isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 54 | Low |
org.apache.myfaces.custom.dojo.DojoInitializerRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.dojo.DojoInitializer in org.apache.myfaces.custom.dojo.DojoInitializerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 75 | Low |
org.apache.myfaces.custom.dojo.DojoUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.dojo.DojoUtils.addDebugConsole(FacesContext, UIComponent) invokes inefficient Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 185 | Medium |
org.apache.myfaces.custom.dojo.DojoUtils.getExpanded(FacesContext) invokes inefficient Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 422 | Medium |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 118 | Low |
Redundant nullcheck of m, which is known to be non-null in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 131 | Medium |
Redundant nullcheck of m, which is known to be non-null in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 127 | Low |
Redundant nullcheck of m, which is known to be non-null in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 136 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | REC_CATCH_EXCEPTION | 142 | Low |
org.apache.myfaces.custom.emailvalidator.ValidateEmailTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to facesContext in org.apache.myfaces.custom.emailvalidator.ValidateEmailTag.createValidator() | STYLE | DLS_DEAD_LOCAL_STORE | 45 | Medium |
org.apache.myfaces.custom.equalvalidator.AbstractEqualValidator
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Redundant nullcheck of foreignValue, which is known to be non-null in org.apache.myfaces.custom.equalvalidator.AbstractEqualValidator.validate(FacesContext, UIComponent, Object) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 128 | Medium |
org.apache.myfaces.custom.equalvalidator.ValidateEqualTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.equalvalidator.ValidateEqualTag.createValidator() invokes inefficient new String(String) constructor | PERFORMANCE | DM_STRING_CTOR | 60 | Medium |
org.apache.myfaces.custom.fieldset.FieldsetRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.fieldset.Fieldset in org.apache.myfaces.custom.fieldset.FieldsetRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 53 | Low |
org.apache.myfaces.custom.fileupload.HtmlFileUploadRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.fileupload.HtmlInputFileUpload in org.apache.myfaces.custom.fileupload.HtmlFileUploadRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 72 | Low |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl.getBytes() ignores result of java.io.InputStream.read(byte[]) | BAD_PRACTICE | RR_NOT_CHECKED | 91 | Medium |
The field org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl.fileItem is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Low |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl$DefaultDiskStorageStrategy
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl$DefaultDiskStorageStrategy is serializable and an inner class | BAD_PRACTICE | SE_INNER_CLASS | 54-80 | Medium |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl.getBytes() may expose internal representation by returning UploadedFileDefaultMemoryImpl.bytes | MALICIOUS_CODE | EI_EXPOSE_REP | 78 | Medium |
new org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl(FileItem) ignores result of java.io.InputStream.read(byte[]) | BAD_PRACTICE | RR_NOT_CHECKED | 47 | Medium |
The field org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl.fileItem is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Low |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl$DefaultMemoryStorageStrategy
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl$DefaultMemoryStorageStrategy is serializable and an inner class | BAD_PRACTICE | SE_INNER_CLASS | 51-68 | Medium |
org.apache.myfaces.custom.htmlTag.HtmlTagRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.htmlTag.HtmlTag in org.apache.myfaces.custom.htmlTag.HtmlTagRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 51 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.htmlTag.HtmlTag in org.apache.myfaces.custom.htmlTag.HtmlTagRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 77 | Low |
org.apache.myfaces.custom.inputHtml.InputHtml
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 389 | Low |
org.apache.myfaces.custom.inputHtml.InputHtmlRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.inputHtml.InputHtml in org.apache.myfaces.custom.inputHtml.InputHtmlRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 1803 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.inputHtml.InputHtml in org.apache.myfaces.custom.inputHtml.InputHtmlRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 88 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.inputHtml.InputHtml in org.apache.myfaces.custom.inputHtml.InputHtmlRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 1822 | Low |
org.apache.myfaces.custom.jslistener.JsValueChangeListenerRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.jslistener.JsValueChangeListener in org.apache.myfaces.custom.jslistener.JsValueChangeListenerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 55 | Low |
org.apache.myfaces.custom.jsvalueset.HtmlJsValueSetRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.jsvalueset.HtmlJsValueSet in org.apache.myfaces.custom.jsvalueset.HtmlJsValueSetRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 122 | Low |
org.apache.myfaces.custom.layout.HtmlLayoutRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.layout.HtmlPanelLayout in org.apache.myfaces.custom.layout.HtmlLayoutRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 69 | Low |
org.apache.myfaces.custom.navigation.AbstractHtmlCommandNavigation
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
instanceof will always return true in org.apache.myfaces.custom.navigation.AbstractHtmlCommandNavigation.toggleOpen(), since all org.apache.myfaces.custom.navigation.HtmlPanelNavigation are instances of org.apache.myfaces.custom.navigation.HtmlPanelNavigation | STYLE | BC_VACUOUS_INSTANCEOF | 164 | Medium |
org.apache.myfaces.custom.navigation.HtmlCommandNavigationTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.navigation.HtmlCommandNavigationTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 59 | Medium |
Dead store to context in org.apache.myfaces.custom.navigation.HtmlCommandNavigationTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 63 | Medium |
org.apache.myfaces.custom.navigation.HtmlNavigationRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navigation.HtmlPanelNavigation in org.apache.myfaces.custom.navigation.HtmlNavigationRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 100 | Low |
org.apache.myfaces.custom.navmenu.HtmlNavigationMenuItemsTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.navmenu.HtmlNavigationMenuItemsTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
Dead store to context in org.apache.myfaces.custom.navmenu.HtmlNavigationMenuItemsTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.navmenu.NavigationMenuItem
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.custom.navmenu.NavigationMenuItem defines non-transient non-serializable instance field _navigationMenuItems | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.custom.navmenu.NavigationMenuUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Nullcheck of child at line 111 of value previously dereferenced in org.apache.myfaces.custom.navmenu.NavigationMenuUtils.getNavigationMenuItemList(UIComponent) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 111 | High |
org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
instanceof will always return true in org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.getParentPanelNavigation(), since all org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu are instances of org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu | STYLE | BC_VACUOUS_INSTANCEOF | 179 | Medium |
instanceof will always return true in org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.toggleOpen(), since all org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu are instances of org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu | STYLE | BC_VACUOUS_INSTANCEOF | 222 | Medium |
org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.getActiveDirectly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 105 | Medium |
org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.getOpenDirectly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 98 | Medium |
org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlPanelNavigationMenu
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Redundant nullcheck of prevItem, which is known to be non-null in org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlPanelNavigationMenu.restoreOpenActiveStates(FacesContext, UIViewRoot, List) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 118 | Medium |
org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlNavigationMenuRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu in org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlNavigationMenuRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 101 | Low |
org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.jscookmenu.HtmlCommandJSCookMenu in org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 109 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.jscookmenu.HtmlCommandJSCookMenu in org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 361 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.jscookmenu.HtmlCommandJSCookMenu in org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 373 | Low |
org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.newspaper.HtmlNewspaperTable in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 59 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.newspaper.HtmlNewspaperTable in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 74 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.newspaper.HtmlNewspaperTable in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 161 | Low |
instanceof will always return true in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getFooterClass(HtmlNewspaperTable), since all org.apache.myfaces.custom.newspaper.HtmlNewspaperTable are instances of javax.faces.component.html.HtmlDataTable | STYLE | BC_VACUOUS_INSTANCEOF | 336 | Medium |
instanceof will always return true in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getHeaderClass(HtmlNewspaperTable), since all org.apache.myfaces.custom.newspaper.HtmlNewspaperTable are instances of javax.faces.component.html.HtmlDataTable | STYLE | BC_VACUOUS_INSTANCEOF | 326 | Medium |
instanceof will always return true in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getStyles(HtmlNewspaperTable), since all org.apache.myfaces.custom.newspaper.HtmlNewspaperTable are instances of javax.faces.component.html.HtmlDataTable | STYLE | BC_VACUOUS_INSTANCEOF | 349 | Medium |
Method org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getFooterClass(HtmlNewspaperTable) does an unnecessary type check using instanceof operator when it can be determined statically | CORRECTNESS | SIO_SUPERFLUOUS_INSTANCEOF | 336 | Low |
Method org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getHeaderClass(HtmlNewspaperTable) does an unnecessary type check using instanceof operator when it can be determined statically | CORRECTNESS | SIO_SUPERFLUOUS_INSTANCEOF | 326 | Low |
Method org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getStyles(HtmlNewspaperTable) does an unnecessary type check using instanceof operator when it can be determined statically | CORRECTNESS | SIO_SUPERFLUOUS_INSTANCEOF | 349 | Low |
org.apache.myfaces.custom.panelstack.HtmlPanelStackRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.panelstack.HtmlPanelStack in org.apache.myfaces.custom.panelstack.HtmlPanelStackRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 62 | Low |
org.apache.myfaces.custom.picklist.HtmlPicklistRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.custom.picklist.HtmlPicklistRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 168 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.picklist.HtmlSelectManyPicklist in org.apache.myfaces.custom.picklist.HtmlPicklistRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 131 | Low |
org.apache.myfaces.custom.popup.HtmlPopup
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingElement() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 178 | Medium |
org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingPopup() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 203 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingElement() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 172 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingPopup() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 197 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getDisplayAtDistanceX() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 122 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getDisplayAtDistanceY() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 147 | Medium |
org.apache.myfaces.custom.popup.HtmlPopupRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.popup.HtmlPopup in org.apache.myfaces.custom.popup.HtmlPopupRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 75 | Low |
org.apache.myfaces.custom.popup.HtmlPopupRenderer.encodeEnd(FacesContext, UIComponent) invokes inefficient new String(String) constructor | PERFORMANCE | DM_STRING_CTOR | 131 | Medium |
org.apache.myfaces.custom.regexprvalidator.ValidateRegExprTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to facesContext in org.apache.myfaces.custom.regexprvalidator.ValidateRegExprTag.createValidator() | STYLE | DLS_DEAD_LOCAL_STORE | 52 | Medium |
org.apache.myfaces.custom.savestate.SaveStateTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.savestate.SaveStateTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
Dead store to context in org.apache.myfaces.custom.savestate.SaveStateTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.schedule.AbstractScheduleRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.AbstractScheduleRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 73 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.AbstractScheduleRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 152 | Low |
org.apache.myfaces.custom.schedule.ScheduleCompactMonthRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleCompactMonthRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 71 | Low |
org.apache.myfaces.custom.schedule.ScheduleCompactWeekRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleCompactWeekRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 68 | Low |
org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 82 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 116 | Low |
integral division result cast to double or float in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.writeBackgroundStart(FacesContext, HtmlSchedule, ResponseWriter) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 422 | Medium |
integral division result cast to double or float in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.writeEntries(FacesContext, HtmlSchedule, ScheduleDay, ResponseWriter) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 654 | Medium |
integral division result cast to double or float in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.writeForegroundStart(FacesContext, HtmlSchedule, ResponseWriter) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 764 | Medium |
Unread field: org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.defaultRowHeightInPixels; should this field be static? | PERFORMANCE | SS_SHOULD_BE_STATIC | 64 | Medium |
org.apache.myfaces.custom.schedule.UISchedule
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.schedule.UISchedule.getLastClickedDateAndTime() may expose internal representation by returning UISchedule._lastClickedDateAndTime | MALICIOUS_CODE | EI_EXPOSE_REP | 209 | Medium |
Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _scheduleListener | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _action | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _actionListener | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _mouseListener | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
org.apache.myfaces.custom.schedule.UISchedule$ScheduleActionListener
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.custom.schedule.UISchedule$ScheduleActionListener be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 51-65 | Medium |
org.apache.myfaces.custom.schedule.UIScheduleBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.custom.schedule.UIScheduleBase defines non-transient non-serializable instance field _converter | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
org.apache.myfaces.custom.schedule.model.AbstractScheduleModel
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.custom.schedule.model.AbstractScheduleModel.getDays() uses the same code for two switch clauses | STYLE | DB_DUPLICATE_SWITCH_CLAUSES | 89-91 | Low |
org.apache.myfaces.custom.schedule.model.AbstractScheduleModel.getSelectedDate() may expose internal representation by returning AbstractScheduleModel.selectedDate | MALICIOUS_CODE | EI_EXPOSE_REP | 168 | Medium |
org.apache.myfaces.custom.schedule.model.AbstractScheduleModel.setSelectedDate(Date) may expose internal representation by storing an externally mutable object into AbstractScheduleModel.selectedDate | MALICIOUS_CODE | EI_EXPOSE_REP2 | 159 | Medium |
org.apache.myfaces.custom.schedule.model.Day
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.schedule.model.Day.getDate() may expose internal representation by returning Day.date | MALICIOUS_CODE | EI_EXPOSE_REP | 111 | Medium |
org.apache.myfaces.custom.schedule.model.Day.getDayEnd() may expose internal representation by returning Day.dayEnd | MALICIOUS_CODE | EI_EXPOSE_REP | 119 | Medium |
org.apache.myfaces.custom.schedule.model.Day.getDayStart() may expose internal representation by returning Day.dayStart | MALICIOUS_CODE | EI_EXPOSE_REP | 127 | Medium |
new org.apache.myfaces.custom.schedule.model.Day(Date, TimeZone) may expose internal representation by storing an externally mutable object into Day.date | MALICIOUS_CODE | EI_EXPOSE_REP2 | 83 | Medium |
org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.getEndTime() may expose internal representation by returning DefaultScheduleEntry.endTime | MALICIOUS_CODE | EI_EXPOSE_REP | 116 | Medium |
org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.getStartTime() may expose internal representation by returning DefaultScheduleEntry.startTime | MALICIOUS_CODE | EI_EXPOSE_REP | 152 | Medium |
org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.setEndTime(Date) may expose internal representation by storing an externally mutable object into DefaultScheduleEntry.endTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 97 | Medium |
org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.setStartTime(Date) may expose internal representation by storing an externally mutable object into DefaultScheduleEntry.startTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 140 | Medium |
org.apache.myfaces.custom.schedule.model.HalfHourInterval
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.schedule.model.HalfHourInterval is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 41-71 | Low |
org.apache.myfaces.custom.schedule.model.Interval
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.schedule.model.Interval.getEndTime() may expose internal representation by returning Interval.endTime | MALICIOUS_CODE | EI_EXPOSE_REP | 72 | Medium |
org.apache.myfaces.custom.schedule.model.Interval.getStartTime() may expose internal representation by returning Interval.startTime | MALICIOUS_CODE | EI_EXPOSE_REP | 63 | Medium |
new org.apache.myfaces.custom.schedule.model.Interval(String, Date, Date) may expose internal representation by storing an externally mutable object into Interval.endTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 49 | Medium |
new org.apache.myfaces.custom.schedule.model.Interval(String, Date, Date) may expose internal representation by storing an externally mutable object into Interval.startTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 48 | Medium |
org.apache.myfaces.custom.schedule.model.Interval.setEndTime(Date) may expose internal representation by storing an externally mutable object into Interval.endTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 76 | Medium |
org.apache.myfaces.custom.schedule.model.Interval.setStartTime(Date) may expose internal representation by storing an externally mutable object into Interval.startTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 67 | Medium |
org.apache.myfaces.custom.schedule.model.Interval is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 46-158 | Low |
org.apache.myfaces.custom.schedule.model.ScheduleDay
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.schedule.model.ScheduleDay doesn't override Day.equals(Object) | STYLE | EQ_DOESNT_OVERRIDE_EQUALS | 65-357 | Medium |
org.apache.myfaces.custom.selectOneCountry.AbstractSelectOneCountry
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 82 | Low |
Method org.apache.myfaces.custom.selectOneCountry.AbstractSelectOneCountry.getCountriesChoicesAsSelectItemList() makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 126 | Medium |
org.apache.myfaces.custom.selectOneCountry.SelectOneCountry
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.selectOneCountry.SelectOneCountry.getMaxLength() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.custom.selectOneCountry.SelectOneCountryRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.selectOneCountry.SelectOneCountry in org.apache.myfaces.custom.selectOneCountry.SelectOneCountryRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 52 | Low |
org.apache.myfaces.custom.selectOneLanguage.AbstractSelectOneLanguage
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 86 | Low |
Method org.apache.myfaces.custom.selectOneLanguage.AbstractSelectOneLanguage.getLanguagesChoicesAsSelectItemList() makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 130 | Medium |
org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguage
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguage.getMaxLength() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguageRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguage in org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguageRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 52 | Low |
org.apache.myfaces.custom.selectitems.AbstractUISelectItems
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.custom.selectitems.AbstractUISelectItems.createSelectItems(Object) uses Collection.toArray() with zero-length array argument | PERFORMANCE | ITA_INEFFICIENT_TO_ARRAY | 145 | Low |
org.apache.myfaces.custom.sortheader.HtmlSortHeaderRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.sortheader.HtmlCommandSortHeader in org.apache.myfaces.custom.sortheader.HtmlSortHeaderRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 70 | Low |
org.apache.myfaces.custom.stylesheet.StylesheetRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.stylesheet.Stylesheet in org.apache.myfaces.custom.stylesheet.StylesheetRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 52 | Low |
org.apache.myfaces.custom.stylesheet.TextResourceFilter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.custom.stylesheet.TextResourceFilter.getOrCreateFilteredResource(FacesContext, String) invokes toString() method on a String | PERFORMANCE | DM_STRING_TOSTRING | 196 | Low |
Class org.apache.myfaces.custom.stylesheet.TextResourceFilter defines non-transient non-serializable instance field filteredResources | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.custom.stylesheet.TextResourceFilter is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 61-233 | Medium |
org.apache.myfaces.custom.subform.SubForm
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.subform.SubForm.getPreserveSubmittedValues() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 71 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.subform.SubForm.getPreserveSubmittedValues() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 65 | Medium |
org.apache.myfaces.custom.subform.SubFormRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.subform.SubForm in org.apache.myfaces.custom.subform.SubFormRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 80 | Low |
org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane.getActivePanelTabVar() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 82 | Medium |
Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane.getActivePanelTabVar() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 76 | Medium |
org.apache.myfaces.custom.tabbedpane.HtmlTabbedPaneRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane in org.apache.myfaces.custom.tabbedpane.HtmlTabbedPaneRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 258 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane in org.apache.myfaces.custom.tabbedpane.HtmlTabbedPaneRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 94 | Low |
org.apache.myfaces.custom.tabbedpane.TabChangeEvent
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.event.FacesListener to org.apache.myfaces.custom.tabbedpane.TabChangeListener in org.apache.myfaces.custom.tabbedpane.TabChangeEvent.processListener(FacesListener) | STYLE | BC_UNCONFIRMED_CAST | 63 | Low |
org.apache.myfaces.custom.toggle.ToggleGroupRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.ToggleGroup in org.apache.myfaces.custom.toggle.ToggleGroupRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 43 | Low |
Dead store to toggleGroup in org.apache.myfaces.custom.toggle.ToggleGroupRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 43 | Medium |
org.apache.myfaces.custom.toggle.ToggleLinkRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.ToggleLink in org.apache.myfaces.custom.toggle.ToggleLinkRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 147 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.ToggleLink in org.apache.myfaces.custom.toggle.ToggleLinkRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 137 | Low |
org.apache.myfaces.custom.toggle.TogglePanelRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.TogglePanel in org.apache.myfaces.custom.toggle.TogglePanelRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 54 | Low |
org.apache.myfaces.custom.tree.DefaultMutableTreeNode
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.custom.tree.DefaultMutableTreeNode defines non-transient non-serializable instance field children | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.custom.tree.DefaultMutableTreeNode is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 36-214 | Low |
org.apache.myfaces.custom.tree.HtmlTree$Event
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Switch statement found in org.apache.myfaces.custom.tree.HtmlTree$Event.process(HtmlTree) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 1066-1069 | Low |
org.apache.myfaces.custom.tree.HtmlTree$ModelListener
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.tree.HtmlTree$ModelListener is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 980-1033 | Low |
org.apache.myfaces.custom.tree.HtmlTreeNode
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.tree.HtmlTreeNode.getLayout() may expose internal representation by returning HtmlTreeNode.layout | MALICIOUS_CODE | EI_EXPOSE_REP | 438 | Medium |
org.apache.myfaces.custom.tree.HtmlTreeNode.setLayout(int[]) may expose internal representation by storing an externally mutable object into HtmlTreeNode.layout | MALICIOUS_CODE | EI_EXPOSE_REP2 | 444 | Medium |
org.apache.myfaces.custom.tree.event.TreeSelectionEvent
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.event.FacesListener to org.apache.myfaces.custom.tree.event.TreeSelectionListener in org.apache.myfaces.custom.tree.event.TreeSelectionEvent.processListener(FacesListener) | STYLE | BC_UNCONFIRMED_CAST | 86 | Low |
org.apache.myfaces.custom.tree.model.DefaultTreeModel
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.custom.tree.model.DefaultTreeModel.getPathToRoot(TreeNode, int) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 265 | Low |
org.apache.myfaces.custom.tree.model.DefaultTreeModel is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 40-403 | Low |
org.apache.myfaces.custom.tree.model.TreeModelEvent
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
new org.apache.myfaces.custom.tree.model.TreeModelEvent(Object, TreePath, int[], Object[]) may expose internal representation by storing an externally mutable object into TreeModelEvent.childIndices | MALICIOUS_CODE | EI_EXPOSE_REP2 | 71 | Medium |
new org.apache.myfaces.custom.tree.model.TreeModelEvent(Object, TreePath, int[], Object[]) may expose internal representation by storing an externally mutable object into TreeModelEvent.children | MALICIOUS_CODE | EI_EXPOSE_REP2 | 72 | Medium |
Should org.apache.myfaces.custom.tree.model.TreeModelEvent.getChildIndices() return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 177 | Low |
Should org.apache.myfaces.custom.tree.model.TreeModelEvent.getChildren() return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 155 | Low |
org.apache.myfaces.custom.tree.model.TreePath
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
new org.apache.myfaces.custom.tree.model.TreePath(Object[]) may expose internal representation by storing an externally mutable object into TreePath.elements | MALICIOUS_CODE | EI_EXPOSE_REP2 | 48 | Medium |
org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeCheckboxRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree.HtmlTreeCheckbox in org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeCheckboxRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 51 | Low |
org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeNodeRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree.HtmlTreeNode in org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeNodeRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 51 | Low |
org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree.HtmlTree in org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 95 | Low |
org.apache.myfaces.custom.tree.taglib.TreeColumnTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.custom.tree.taglib.TreeColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
Dead store to context in org.apache.myfaces.custom.tree.taglib.TreeColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.tree2.HtmlTreeRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree2.HtmlTree in org.apache.myfaces.custom.tree2.HtmlTreeRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 131 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree2.HtmlTree in org.apache.myfaces.custom.tree2.HtmlTreeRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 176 | Low |
Method org.apache.myfaces.custom.tree2.HtmlTreeRenderer.restoreStateFromCookies(FacesContext, UIComponent) makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 105 | Medium |
org.apache.myfaces.custom.tree2.ToggleExpandedEvent
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.tree2.ToggleExpandedEvent is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 40-66 | Low |
org.apache.myfaces.custom.tree2.TreeNodeBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.custom.tree2.TreeNodeBase defines compareTo(Object) and uses Object.equals() | BAD_PRACTICE | EQ_COMPARETO_USE_OBJECT_EQUALS | 103-118 | Medium |
Class org.apache.myfaces.custom.tree2.TreeNodeBase defines non-transient non-serializable instance field children | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.custom.tree2.TreeWalkerBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
TreeWalkerBase.tree not initialized in constructor | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available | Low |
org.apache.myfaces.custom.tree2.UITreeData
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Switch statement found in org.apache.myfaces.custom.tree2.UITreeData.processNodes(FacesContext, int, TreeWalker) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 556-559 | Low |
org.apache.myfaces.custom.updateactionlistener.UpdateActionListenerTagHandler
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.custom.updateactionlistener.UpdateActionListenerTagHandler.apply(FaceletContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 83 | Low |
org.apache.myfaces.dateformat.DateFormatSymbols
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unread field: org.apache.myfaces.dateformat.DateFormatSymbols.eras | PERFORMANCE | URF_UNREAD_FIELD | 41 | Medium |
Unread field: org.apache.myfaces.dateformat.DateFormatSymbols.zoneStrings | PERFORMANCE | URF_UNREAD_FIELD | 67 | Medium |
org.apache.myfaces.dateformat.ParserContext
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unread field: org.apache.myfaces.dateformat.ParserContext.ambiguousWeekYear | PERFORMANCE | URF_UNREAD_FIELD | 581 | Medium |
org.apache.myfaces.dateformat.SimpleDateFormatter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
integral division result cast to double or float in org.apache.myfaces.dateformat.SimpleDateFormatter.getIsoWeekDate(Date) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 172 | Medium |
org.apache.myfaces.generated.taglib.html.ext.HtmlInputHiddenTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to context in org.apache.myfaces.generated.taglib.html.ext.HtmlInputHiddenTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 78 | Medium |
org.apache.myfaces.generated.taglib.html.ext.HtmlSelectBooleanCheckboxTag
Bug | Category | Details | Line | Priority |
---|
org.apache.myfaces.generated.taglib.html.ext.HtmlSelectManyCheckboxTag
Bug | Category | Details | Line | Priority |
---|
org.apache.myfaces.renderkit.html.ext.HtmlCheckboxRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.renderkit.html.ext.HtmlCheckboxRenderer.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean) | STYLE | BC_UNCONFIRMED_CAST | 259 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlHiddenRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.renderkit.html.ext.HtmlHiddenRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 77 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlSecretRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIInput in org.apache.myfaces.renderkit.html.ext.HtmlSecretRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 65 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIData to org.apache.myfaces.component.html.ext.HtmlDataTable in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.beforeBody(FacesContext, UIData) | STYLE | BC_UNCONFIRMED_CAST | 307 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIData to org.apache.myfaces.component.html.ext.HtmlDataTable in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.renderColumnBody(FacesContext, ResponseWriter, UIData, UIComponent, HtmlTableRendererBase$Styles, int) | STYLE | BC_UNCONFIRMED_CAST | 664 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIData to org.apache.myfaces.component.html.ext.HtmlDataTable in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.renderRowStart(FacesContext, ResponseWriter, UIData, HtmlTableRendererBase$Styles, int) | STYLE | BC_UNCONFIRMED_CAST | 531 | Low |
Primitive boxed just to call toString in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.renderColumnBody(FacesContext, ResponseWriter, UIData, UIComponent, HtmlTableRendererBase$Styles, int) | PERFORMANCE | DM_BOXED_PRIMITIVE_TOSTRING | 704 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlTextRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIInput in org.apache.myfaces.renderkit.html.ext.HtmlTextRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 209 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlTextareaRenderer
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIInput in org.apache.myfaces.renderkit.html.ext.HtmlTextareaRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 64 | Low |
org.apache.myfaces.renderkit.html.util.DefaultAddResource
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Field DefaultAddResource.log masks field in superclass org.apache.myfaces.renderkit.html.util.NonBufferingAddResource | CORRECTNESS | MF_CLASS_MASKS_FIELD | 79-824 | High |
org.apache.myfaces.renderkit.html.util.DefaultAddResource.writeResponse(HttpServletRequest, HttpServletResponse) may fail to close stream | BAD_PRACTICE | OS_OPEN_STREAM | 488 | Medium |
org.apache.myfaces.renderkit.html.util.ExtensionsPhaseListener
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.html.util.ExtensionsPhaseListener.writeCodeBeforeBodyEnd(FacesContext) | STYLE | REC_CATCH_EXCEPTION | 186 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Can't close content since it is always null in org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.loadResourceFile(FacesContext, String) | CORRECTNESS | NP_CLOSING_NULL | 912 | High |
Possible null pointer dereference of content in org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.loadResourceFile(FacesContext, String) | CORRECTNESS | NP_NULL_ON_SOME_PATH | 931 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$1 defines equals and uses Object.hashCode() | BAD_PRACTICE | HE_EQUALS_USE_HASHCODE | 58-65 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 222 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 137 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 88 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONSELECT_AND_ONCHANGE is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 103 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 148 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_STYLE is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 152 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 78 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 270 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 274 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 284 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 416 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 296 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 301 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 361 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_TABLE_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 436 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 387 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 444 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 124 | High |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 199 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 212 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 217 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 317 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 325 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 329 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONFOCUS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 96 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 164 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 179 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 174 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 156 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 160 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 184 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 55 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 67 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 233 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 242 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 257 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_UPLOAD_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 412 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 340 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.MESSAGE_PASSTHROUGH_ATTRIBUTES_WITHOUT_TITLE_STYLE_AND_STYLE_CLASS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 429 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 355 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 373 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 396 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 406 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 440 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 116 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 142 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 169 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 347 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean) | STYLE | BC_UNCONFIRMED_CAST | 177 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 222 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 98 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlListboxRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
instanceof will always return true in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlListboxRendererBase.encodeEnd(FacesContext, UIComponent), since all javax.faces.component.html.HtmlSelectOneListbox are instances of javax.faces.component.html.HtmlSelectOneListbox | STYLE | BC_VACUOUS_INSTANCEOF | 68 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 59 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 300 | Low |
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean) | STYLE | BC_UNCONFIRMED_CAST | 165 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.findUIOutputConverterFailSafe(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 376 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.findUISelectManyConverterFailsafe(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 362 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter) | STYLE | BC_UNCONFIRMED_CAST | 335 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter) | STYLE | BC_UNCONFIRMED_CAST | 342 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.DEFAULT_CHAR_ENCODING isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 1346 | Low |
Method call in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.renderDisplayValueOnlyForSelects(FacesContext, UIComponent) passes null for nonnull parameter of renderSelectOptionsAsText(FacesContext, UIComponent, Converter, Set, List, boolean) | CORRECTNESS | NP_NULL_PARAM_DEREF | 668 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlResponseWriterImpl
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 117 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 189 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 263 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 359 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 106 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 105 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 133 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 647 | Low |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeInnerHtml(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 216 | Low |
Redundant nullcheck of elemName, which is known to be non-null in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.renderFacet(FacesContext, ResponseWriter, UIComponent, boolean) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 731 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 191 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 92 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 149 | Low |
Switch statement found in org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils.encodeString(String) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 206-208 | Low |
org.apache.myfaces.shared_tomahawk.taglib.html.HtmlColumnTag
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to comp in org.apache.myfaces.shared_tomahawk.taglib.html.HtmlColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
Dead store to context in org.apache.myfaces.shared_tomahawk.taglib.html.HtmlColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.shared_tomahawk.test.ClassElementHandler
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
ClassElementHandler.buffer not initialized in constructor | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available | Low |
org.apache.myfaces.shared_tomahawk.util.ExceptionUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.ExceptionUtils.getExceptions(Throwable) | STYLE | REC_CATCH_EXCEPTION | 59 | Low |
org.apache.myfaces.shared_tomahawk.util.LocaleUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.LocaleUtils.converterTagLocaleFromString(String) | STYLE | REC_CATCH_EXCEPTION | 136 | Low |
org.apache.myfaces.shared_tomahawk.util.MessageUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method call in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessageFromBundle(String, String, Object[]) passes null for nonnull parameter of getMessageFromBundle(String, FacesContext, Locale, String, Object[]) | CORRECTNESS | NP_NULL_PARAM_DEREF | 263 | Medium |
Redundant comparison of non-null value to null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(String, FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE | 588 | Low |
Redundant comparison of non-null value to null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE | 568 | Low |
Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(String, FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 591 | Low |
Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 571 | Low |
org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
new org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage(String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._args | MALICIOUS_CODE | EI_EXPOSE_REP2 | 54 | Medium |
new org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage(FacesMessage$Severity, String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._args | MALICIOUS_CODE | EI_EXPOSE_REP2 | 63 | Medium |
The field org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage._evaluatedArgs is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Low |
org.apache.myfaces.shared_tomahawk.util.StateUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
instanceof will always return true in org.apache.myfaces.shared_tomahawk.util.StateUtils.getMacSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKey | STYLE | BC_VACUOUS_INSTANCEOF | 936 | Medium |
instanceof will always return true in org.apache.myfaces.shared_tomahawk.util.StateUtils.getSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKey | STYLE | BC_VACUOUS_INSTANCEOF | 791 | Medium |
Dead store of null to baos in org.apache.myfaces.shared_tomahawk.util.StateUtils.compress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 346 | Low |
Dead store of null to gzip in org.apache.myfaces.shared_tomahawk.util.StateUtils.compress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 345 | Low |
Dead store of null to bais in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 417 | Low |
Dead store of null to baos in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 416 | Low |
Dead store of null to gis in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 418 | Low |
Dead store of null to outputStream in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsByteArray(Object, ExternalContext) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 274 | Low |
Dead store of null to writer in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsByteArray(Object, ExternalContext) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 273 | Low |
Random object created and used only once in org.apache.myfaces.shared_tomahawk.util.StateUtils.findMacSecret(String, String) | BAD_PRACTICE | DMI_RANDOM_USED_ONLY_ONCE | 986 | High |
Random object created and used only once in org.apache.myfaces.shared_tomahawk.util.StateUtils.findSecret(String, String) | BAD_PRACTICE | DMI_RANDOM_USED_ONLY_ONCE | 841 | High |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 667 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 679 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 645 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 630 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 861 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 874 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 950 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 962 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 805 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 817 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 907 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 762 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 724 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 189 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.decrypt(byte[], ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 490 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.encrypt(byte[], ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 328 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsObject(byte[], ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 552 | Low |
org.apache.myfaces.shared_tomahawk.util.StringUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.shared_tomahawk.util.StringUtils.trim(String[]) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 685 | Low |
org.apache.myfaces.shared_tomahawk.util._Constants
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Redundant nullcheck of ret, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util._Constants.getStringResource(String) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 185 | Low |
org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet.doGet(HttpServletRequest, HttpServletResponse) | STYLE | REC_CATCH_EXCEPTION | 87 | Low |
org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 26-121 | Low |
org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser.parse() | STYLE | REC_CATCH_EXCEPTION | 112 | Low |
org.apache.myfaces.tomahawk.util.ExternalContextUtils
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Exception is caught when Exception is not thrown in org.apache.myfaces.tomahawk.util.ExternalContextUtils.getContentLength(ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 73 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.tomahawk.util.ExternalContextUtils.getRequestInputStream(ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 103 | Low |
org.apache.myfaces.validator.AttachedListStateWrapper
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.validator.AttachedListStateWrapper defines non-transient non-serializable instance field _wrappedStateList | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.webapp.filter.ExtensionsFilter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 299 | Low |
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 254 | Low |
Load of known null value in org.apache.myfaces.webapp.filter.ExtensionsFilter.init(FilterConfig) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 236 | Medium |
org.apache.myfaces.webapp.filter.ExtensionsResponseWrapper$MyServletOutputStream
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.webapp.filter.ExtensionsResponseWrapper$MyServletOutputStream be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 128-142 | Medium |
org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 54 | Low |
Unchecked/unconfirmed cast from javax.servlet.ServletResponse to javax.servlet.http.HttpServletResponse in org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 55 | Low |
HTTP parameter directly written to HTTP header output in org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | SECURITY | HRS_REQUEST_PARAMETER_TO_HTTP_HEADER | 59 | Medium |
org.apache.myfaces.webapp.filter.MultipartRequestWrapper
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Should org.apache.myfaces.webapp.filter.MultipartRequestWrapper.getParameterValues(String) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 305 | Low |
org.apache.myfaces.webapp.filter.MultipartRequestWrapperConfig
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 57 | Low |
Load of known null value in org.apache.myfaces.webapp.filter.MultipartRequestWrapperConfig.getMultipartRequestWrapperConfig(ExternalContext) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 173 | Medium |
org.apache.myfaces.webapp.filter.TomahawkFacesContextWrapper
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Dead store to oldResponse in org.apache.myfaces.webapp.filter.TomahawkFacesContextWrapper.release() | STYLE | DLS_DEAD_LOCAL_STORE | 348 | Medium |
org.apache.myfaces.webapp.filter.WelcomeFileFilter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.webapp.filter.WelcomeFileFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 100 | Low |
Exception is caught when Exception is not thrown in org.apache.myfaces.webapp.filter.WelcomeFileFilter.init(FilterConfig) | STYLE | REC_CATCH_EXCEPTION | 209 | Low |
org.apache.myfaces.webapp.filter.WelcomeFileHandler
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.webapp.filter.WelcomeFileHandler.getWelcomeFiles() may expose internal representation by returning WelcomeFileHandler.files | MALICIOUS_CODE | EI_EXPOSE_REP | 63 | Medium |
WelcomeFileHandler.welcomeFiles not initialized in constructor | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available | Low |
org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Nullcheck of fileItem at line 205 of value previously dereferenced in org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload.parseRequestCatchingFileSizeErrors(ActionRequest, FileUpload) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 205 | Medium |
org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
The class org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 176-180 | Low |
org.apache.myfaces.webapp.filter.portlet.PortletExternalContextWrapper$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
The class org.apache.myfaces.webapp.filter.portlet.PortletExternalContextWrapper$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 201-211 | Low |
org.apache.myfaces.webapp.filter.portlet.SessionMap
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.webapp.filter.portlet.SessionMap.getAttribute(String) invokes toString() method on a String | PERFORMANCE | DM_STRING_TOSTRING | 54 | Low |
org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Nullcheck of fileItem at line 204 of value previously dereferenced in org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload.parseRequestCatchingFileSizeErrors(HttpServletRequest, FileUpload) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 204 | Medium |
org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
The class org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 175-179 | Low |
org.apache.myfaces.webapp.filter.servlet.ServletExternalContextWrapper$1
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
The class org.apache.myfaces.webapp.filter.servlet.ServletExternalContextWrapper$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 220-230 | Low |
org.apache.myfaces.webapp.filter.servlet.SessionMap
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Method org.apache.myfaces.webapp.filter.servlet.SessionMap.getAttribute(String) invokes toString() method on a String | PERFORMANCE | DM_STRING_TOSTRING | 54 | Low |