Apache MyFaces
Documentation
Foundation

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is low

Effort is min

Summary

ClassesBugsErrorsMissing Classes
19119001

Files

ClassBugs
org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport2
org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport$_CheckedViewIDMap2
org.apache.myfaces.shared_tomahawk.context.flash.SubKeyMap$Entry1
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils3
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$11
org.apache.myfaces.shared_tomahawk.renderkit._SharedRendererUtils1
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML70
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlButtonRendererBase3
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase1
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase3
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlGroupRendererBase1
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlLinkRendererBase1
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase3
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils9
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlResponseWriterImpl4
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase1
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase7
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase1
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase1
org.apache.myfaces.shared_tomahawk.renderkit.html.util.HTMLEncoder2
org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils2
org.apache.myfaces.shared_tomahawk.resource.BaseResourceHandlerSupport3
org.apache.myfaces.shared_tomahawk.resource.ExternalContextResourceLoader2
org.apache.myfaces.shared_tomahawk.resource.ResourceLoader$VersionComparator1
org.apache.myfaces.shared_tomahawk.resource.ResourceLoaderUtils2
org.apache.myfaces.shared_tomahawk.taglib.UIComponentBodyELTagBase1
org.apache.myfaces.shared_tomahawk.test.ClassElementHandler1
org.apache.myfaces.shared_tomahawk.trace.TracingIterator1
org.apache.myfaces.shared_tomahawk.util.ClassLoaderUtils1
org.apache.myfaces.shared_tomahawk.util.ClassUtils2
org.apache.myfaces.shared_tomahawk.util.ExceptionUtils1
org.apache.myfaces.shared_tomahawk.util.ExternalContextUtils3
org.apache.myfaces.shared_tomahawk.util.LocaleUtils1
org.apache.myfaces.shared_tomahawk.util.MessageUtils5
org.apache.myfaces.shared_tomahawk.util.MyFacesClassLoader2
org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage3
org.apache.myfaces.shared_tomahawk.util.StateUtils28
org.apache.myfaces.shared_tomahawk.util.StringUtils1
org.apache.myfaces.shared_tomahawk.util.WebConfigParamUtils10
org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet1
org.apache.myfaces.shared_tomahawk.view.JspViewDeclarationLanguageBase1
org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser1

org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport

BugCategoryDetailsLinePriority
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport.calculateAndCheckViewId(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE115Low
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport.calculateViewId(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE81Low

org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport$_CheckedViewIDMap

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport$_CheckedViewIDMap is serializable but also an inner class of a non-serializable classBAD_PRACTICESE_BAD_FIELD_INNER_CLASS523Low
Should org.apache.myfaces.shared_tomahawk.application.DefaultViewHandlerSupport$_CheckedViewIDMap be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC523Medium

org.apache.myfaces.shared_tomahawk.context.flash.SubKeyMap$Entry

BugCategoryDetailsLinePriority
Redundant nullcheck of key, which is known to be non-null in org.apache.myfaces.shared_tomahawk.context.flash.SubKeyMap$Entry.hashCode()STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE267Low

org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.getConvertedUISelectOneValue(FacesContext, UISelectOne, Object), since all String are instances of StringSTYLEBC_VACUOUS_INSTANCEOF738Medium
Method org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.getViewSequence(FacesContext) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR946Medium
Possible null pointer dereference of content in org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.loadResourceFile(FacesContext, String)CORRECTNESSNP_NULL_ON_SOME_PATH1140Medium

org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$1

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$1 defines equals and uses Object.hashCode()BAD_PRACTICEHE_EQUALS_USE_HASHCODE92Medium

org.apache.myfaces.shared_tomahawk.renderkit._SharedRendererUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.renderkit._SharedRendererUtils.getConvertedUISelectManyValue(FacesContext, UISelectMany, String[], boolean)STYLEREC_CATCH_EXCEPTION242Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HTML

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT218Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT231Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT246Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT241Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT236Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT250Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BODY_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT517Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BODY_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT529Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BODY_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT539Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BODY_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT543Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT361Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT374Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT143Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT89Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONFOCUS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT97Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONSELECT_AND_ONCHANGE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT104Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT170Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT199Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT190Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT185Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT175Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT203Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT154Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT162Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT166Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT195Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT158Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT81Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT58Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT70Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT260Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT269Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT273Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT287Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT300Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT308Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT318Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_UPLOAD_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT461Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT326Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT340Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT330Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT345Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT385Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT392Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.MESSAGE_PASSTHROUGH_ATTRIBUTES_WITHOUT_TITLE_STYLE_AND_STYLE_CLASS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT481Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT408Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT410Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT488Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT420Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT431Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT435Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT444Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT451Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT455Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT492Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT130Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT117Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE_AND_TITLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT125Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT366Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT370Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT148Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT180Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT304Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT465Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT469Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT335Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT396Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT400Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT496Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT500Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlButtonRendererBase

BugCategoryDetailsLinePriority
Method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlButtonRendererBase.encodeEnd(FacesContext, UIComponent) invokes toString() method on a StringPERFORMANCEDM_STRING_TOSTRING196Low
Private method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlButtonRendererBase.getImage(UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD642Low
Private method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlButtonRendererBase.hasSubmittingBehavior(Map, String) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD291Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean, Integer)STYLEBC_UNCONFIRMED_CAST197Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.decode(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST220Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.encodeBegin(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low
Private method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.getAcceptCharset(UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD266Medium

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlGroupRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.html.HtmlPanelGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlGroupRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlLinkRendererBase

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlLinkRendererBase.renderLinkParameter(String, Object, StringBuffer, String, UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD870Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST364Low
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean, Integer)STYLEBC_UNCONFIRMED_CAST192Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.findUIOutputConverterFailSafe(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST476Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.findUISelectManyConverterFailsafe(FacesContext, UIComponent, boolean)STYLEBC_UNCONFIRMED_CAST463Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter)STYLEBC_UNCONFIRMED_CAST433Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter)STYLEBC_UNCONFIRMED_CAST439Low
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.isTrue(Object) invokes inefficient Boolean constructor; use Boolean.valueOf(...) insteadPERFORMANCEDM_BOOLEAN_CTOR207Medium
public static org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSupportedContentTypes() may expose internal representation by returning HtmlRendererUtils.SUPPORTED_CONTENT_TYPESMALICIOUS_CODEMS_EXPOSE_REP1923Medium
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.DEFAULT_CHAR_ENCODING isn't final but should beMALICIOUS_CODEMS_SHOULD_BE_FINAL1847Low
Method call in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.renderDisplayValueOnlyForSelects(FacesContext, UIComponent, boolean) passes null for nonnull parameter of renderSelectOptionsAsText(FacesContext, UIComponent, Converter, Set, List, boolean)CORRECTNESSNP_NULL_PARAM_DEREF822Medium
Private method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getClientBehaviorScript(FacesContext, UIComponent, String, Map, HtmlRendererUtils$ScriptContext, Collection) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD2029Medium

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlResponseWriterImpl

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE172Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE275Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE369Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE641Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST188Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeChildren(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST171Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST682Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeInnerHtml(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST286Low
Method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.renderColumnFooterCell(FacesContext, ResponseWriter, UIComponent, UIComponent, String, int) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR1095Medium
Method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.renderColumnHeaderCell(FacesContext, ResponseWriter, UIComponent, UIComponent, String, int) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR1041Medium
Method org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.renderTableHeaderOrFooterRow(FacesContext, ResponseWriter, UIComponent, UIComponent, String, String, int, boolean) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR897Medium
Redundant nullcheck of elemName, which is known to be non-null in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.renderFacet(FacesContext, ResponseWriter, UIComponent, boolean)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE766Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST274Low

org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST156Low

org.apache.myfaces.shared_tomahawk.renderkit.html.util.HTMLEncoder

BugCategoryDetailsLinePriority
Switch statement found in org.apache.myfaces.shared_tomahawk.renderkit.html.util.HTMLEncoder.encode(String, boolean, boolean, boolean) where default case is missingSTYLESF_SWITCH_NO_DEFAULT100Low
Switch statement found in org.apache.myfaces.shared_tomahawk.renderkit.html.util.HTMLEncoder.encode(char[], int, int, boolean, boolean, boolean, Writer) where default case is missingSTYLESF_SWITCH_NO_DEFAULT226Low

org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE156Low
Switch statement found in org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils.encodeString(String) where default case is missingSTYLESF_SWITCH_NO_DEFAULT213Low

org.apache.myfaces.shared_tomahawk.resource.BaseResourceHandlerSupport

BugCategoryDetailsLinePriority
Should org.apache.myfaces.shared_tomahawk.resource.BaseResourceHandlerSupport.getResourceLoaders() return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS64Low
Redundant nullcheck of mapping, which is known to be non-null in org.apache.myfaces.shared_tomahawk.resource.BaseResourceHandlerSupport.calculateResourceBasePath(FacesContext)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE72Low
Redundant nullcheck of mapping, which is known to be non-null in org.apache.myfaces.shared_tomahawk.resource.BaseResourceHandlerSupport.getMapping()STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE134Low

org.apache.myfaces.shared_tomahawk.resource.ExternalContextResourceLoader

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.resource.ExternalContextResourceLoader.RESOURCE_VERSION_CHECKER isn't final but should beMALICIOUS_CODEMS_SHOULD_BE_FINAL49High
org.apache.myfaces.shared_tomahawk.resource.ExternalContextResourceLoader.VERSION_CHECKER isn't final but should beMALICIOUS_CODEMS_SHOULD_BE_FINAL42High

org.apache.myfaces.shared_tomahawk.resource.ResourceLoader$VersionComparator

BugCategoryDetailsLinePriority
Should org.apache.myfaces.shared_tomahawk.resource.ResourceLoader$VersionComparator be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC82Medium

org.apache.myfaces.shared_tomahawk.resource.ResourceLoaderUtils

BugCategoryDetailsLinePriority
Method org.apache.myfaces.shared_tomahawk.resource.ResourceLoaderUtils.parseDateHeader(String) invokes inefficient new Long(long) constructor; use Long.valueOf(long) insteadPERFORMANCEDM_NUMBER_CTOR75Medium

org.apache.myfaces.shared_tomahawk.taglib.UIComponentBodyELTagBase

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.shared_tomahawk.taglib.UIComponentBodyELTagBase.setConverterProperty(UIComponent, String) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD210Medium

org.apache.myfaces.shared_tomahawk.test.ClassElementHandler

BugCategoryDetailsLinePriority
ClassElementHandler.buffer not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORLow

org.apache.myfaces.shared_tomahawk.trace.TracingIterator

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.trace.TracingIterator.next() can't throw NoSuchElementExceptionBAD_PRACTICEIT_NO_SUCH_ELEMENT69Low

org.apache.myfaces.shared_tomahawk.util.ClassLoaderUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.ClassLoaderUtils.getServices(String)STYLEREC_CATCH_EXCEPTION306Low

org.apache.myfaces.shared_tomahawk.util.ClassUtils

BugCategoryDetailsLinePriority
Dead store to plugins in org.apache.myfaces.shared_tomahawk.util.ClassUtils.classForName(String)STYLEDLS_DEAD_LOCAL_STORE170Medium
org.apache.myfaces.shared_tomahawk.util.ClassUtils.classLoadingExtensions should be package protectedMALICIOUS_CODEMS_PKGPROTECT73Medium

org.apache.myfaces.shared_tomahawk.util.ExceptionUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.ExceptionUtils.getExceptions(Throwable)STYLEREC_CATCH_EXCEPTION59Low

org.apache.myfaces.shared_tomahawk.util.ExternalContextUtils

BugCategoryDetailsLinePriority
Dead store to response in org.apache.myfaces.shared_tomahawk.util.ExternalContextUtils.getHttpServletResponse(Object)STYLEDLS_DEAD_LOCAL_STORE651High
Dead store to response in org.apache.myfaces.shared_tomahawk.util.ExternalContextUtils.getResponseSwitch(Object)STYLEDLS_DEAD_LOCAL_STORE677High
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.ExternalContextUtils._runMethod(Object, String)STYLEREC_CATCH_EXCEPTION533Low

org.apache.myfaces.shared_tomahawk.util.LocaleUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.LocaleUtils.converterTagLocaleFromString(String)STYLEREC_CATCH_EXCEPTION136Low

org.apache.myfaces.shared_tomahawk.util.MessageUtils

BugCategoryDetailsLinePriority
Method call in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessageFromBundle(String, String, Object[]) passes null for nonnull parameter of getMessageFromBundle(String, FacesContext, Locale, String, Object[])CORRECTNESSNP_NULL_PARAM_DEREF265Medium
Redundant comparison of non-null value to null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(String, FacesContext, String, Object[])STYLERCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE590Low
Redundant comparison of non-null value to null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(FacesContext, String, Object[])STYLERCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE570Low
Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(String, FacesContext, String, Object[])STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE593Low
Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(FacesContext, String, Object[])STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE573Low

org.apache.myfaces.shared_tomahawk.util.MyFacesClassLoader

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.util.MyFacesClassLoader defines equals and uses Object.hashCode()BAD_PRACTICEHE_EQUALS_USE_HASHCODE198High

org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage

BugCategoryDetailsLinePriority
new org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage(String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._argsMALICIOUS_CODEEI_EXPOSE_REP255Medium
new org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage(FacesMessage$Severity, String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._argsMALICIOUS_CODEEI_EXPOSE_REP264Medium
The field org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage._evaluatedArgs is transient but isn't set by deserializationBAD_PRACTICESE_TRANSIENT_FIELD_NOT_RESTOREDLow

org.apache.myfaces.shared_tomahawk.util.StateUtils

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.shared_tomahawk.util.StateUtils.getMacSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKeySTYLEBC_VACUOUS_INSTANCEOF940Medium
instanceof will always return true in org.apache.myfaces.shared_tomahawk.util.StateUtils.getSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKeySTYLEBC_VACUOUS_INSTANCEOF795Medium
Dead store of null to baos in org.apache.myfaces.shared_tomahawk.util.StateUtils.compress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL350Low
Dead store of null to gzip in org.apache.myfaces.shared_tomahawk.util.StateUtils.compress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL349Low
Dead store of null to bais in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL421Low
Dead store of null to baos in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL420Low
Dead store of null to gis in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL422Low
Dead store of null to outputStream in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsByteArray(Object, ExternalContext)STYLEDLS_DEAD_LOCAL_STORE_OF_NULL278Low
Dead store of null to writer in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsByteArray(Object, ExternalContext)STYLEDLS_DEAD_LOCAL_STORE_OF_NULL277Low
Random object created and used only once in org.apache.myfaces.shared_tomahawk.util.StateUtils.findMacSecret(String, String)BAD_PRACTICEDMI_RANDOM_USED_ONLY_ONCE990High
Random object created and used only once in org.apache.myfaces.shared_tomahawk.util.StateUtils.findSecret(String, String)BAD_PRACTICEDMI_RANDOM_USED_ONLY_ONCE845High
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE671Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE683Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE649Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE634Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE865Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE878Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE954Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE966Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE809Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE821Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE911Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE766Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE728Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE193Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.decrypt(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION494Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.encrypt(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION332Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsObject(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION556Low

org.apache.myfaces.shared_tomahawk.util.StringUtils

BugCategoryDetailsLinePriority
Should org.apache.myfaces.shared_tomahawk.util.StringUtils.trim(String[]) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS685Low

org.apache.myfaces.shared_tomahawk.util.WebConfigParamUtils

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE212Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE263Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE327Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE388Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE446Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE509Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE566Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE630Low
org.apache.myfaces.shared_tomahawk.util.WebConfigParamUtils.COMMON_FALSE_VALUES should be package protectedMALICIOUS_CODEMS_PKGPROTECT33Low
org.apache.myfaces.shared_tomahawk.util.WebConfigParamUtils.COMMON_TRUE_VALUES should be package protectedMALICIOUS_CODEMS_PKGPROTECT32Low

org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet

BugCategoryDetailsLinePriority
org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID25Low

org.apache.myfaces.shared_tomahawk.view.JspViewDeclarationLanguageBase

BugCategoryDetailsLinePriority
Dead store to stateManager in org.apache.myfaces.shared_tomahawk.view.JspViewDeclarationLanguageBase.isViewStateAlreadyEncoded(FacesContext)STYLEDLS_DEAD_LOCAL_STORE252Medium

org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser.parse()STYLEREC_CATCH_EXCEPTION114Low