The following document contains the results of FindBugs Report
FindBugs Version is 1.0.0
Threshold is Low
Effort is Default
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.application.pss.PssJspStateManagerImpl.isSerializeStateInSession(javax.faces.context.FacesContext) invokes dubious Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 1198 |
org.apache.myfaces.application.pss.PssJspStateManagerImpl.isCompressStateInSession(javax.faces.context.FacesContext) invokes dubious Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 1216 |
The method name org.apache.myfaces.application.pss.PssJspStateManagerImpl.SaveTreeInManager(javax.faces.context.FacesContext) doesn't start with an lower case letter | STYLE | NM_METHOD_NAMING_CONVENTION | 698-722 |
The method name org.apache.myfaces.application.pss.PssJspStateManagerImpl.LoadUIViewRootFromManager(javax.faces.context.FacesContext,String) doesn't start with an lower case letter | STYLE | NM_METHOD_NAMING_CONVENTION | 726-732 |
The method name org.apache.myfaces.application.pss.PssJspStateManagerImpl.LoadTreeFromManager(javax.faces.context.FacesContext,String) doesn't start with an lower case letter | STYLE | NM_METHOD_NAMING_CONVENTION | 737-746 |
Nullcheck at PssJspStateManagerImpl.java:[line 828] of value previously dereferenced at org.apache.myfaces.application.pss.PssJspStateManagerImpl.diffComponent(TreeStructComponent,TreeStructComponent) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 828 |
Redundant nullcheck of value known to be non-null org.apache.myfaces.application.pss.PssJspStateManagerImpl.getPathToComponent(javax.faces.component.UIComponent,StringBuffer) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 1021 |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator implements Comparator but not Serializable | STYLE | SE_COMPARATOR_SHOULD_BE_SERIALIZABLE | Not available |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.application.jsp.JspStateManagerImpl.isSerializeStateInSession(javax.faces.context.FacesContext) invokes dubious Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 542 |
org.apache.myfaces.application.jsp.JspStateManagerImpl.isCompressStateInSession(javax.faces.context.FacesContext) invokes dubious Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 559 |
Redundant nullcheck of value known to be non-null org.apache.myfaces.application.jsp.JspStateManagerImpl.getPathToComponent(javax.faces.component.UIComponent,StringBuffer) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 383 |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.convert.ConverterUtils.convertToBoolean(Object) invokes dubious Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 68 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UISelectOne in org.apache.myfaces.shared_impl.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean,javax.faces.component.UIComponent,javax.faces.context.FacesContext,javax.faces.convert.Converter) | STYLE | BC_UNCONFIRMED_CAST | 342 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UISelectMany in org.apache.myfaces.shared_impl.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean,javax.faces.component.UIComponent,javax.faces.context.FacesContext,javax.faces.convert.Converter) | STYLE | BC_UNCONFIRMED_CAST | 335 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UISelectMany in org.apache.myfaces.shared_impl.renderkit.html.HtmlRendererUtils.findUISelectManyConverterFailsafe(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 362 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIOutput in org.apache.myfaces.shared_impl.renderkit.html.HtmlRendererUtils.findUIOutputConverterFailSafe(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 376 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.shared_impl.renderkit.html.util.JavascriptUtils.getValidJavascriptName(String,boolean) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 153 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIOutput in org.apache.myfaces.shared_impl.renderkit.html.HtmlTextRendererBase.getConvertedValue(javax.faces.context.FacesContext,javax.faces.component.UIComponent,Object) | STYLE | BC_UNCONFIRMED_CAST | 191 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIOutput in org.apache.myfaces.shared_impl.renderkit.html.HtmlSecretRendererBase.getConvertedValue(javax.faces.context.FacesContext,javax.faces.component.UIComponent,Object) | STYLE | BC_UNCONFIRMED_CAST | 106 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.shared_impl.renderkit.html.HtmlResponseWriterImpl.<init>(java.io.Writer,String,String) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 117 |
Method org.apache.myfaces.shared_impl.renderkit.html.HtmlResponseWriterImpl.closeStartTagIfNecessary() invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 189 |
Method org.apache.myfaces.shared_impl.renderkit.html.HtmlResponseWriterImpl.endElement(String) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 263 |
Method org.apache.myfaces.shared_impl.renderkit.html.HtmlResponseWriterImpl.writeURIAttribute(String,Object,String) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 359 |
org.apache.myfaces.shared_impl.renderkit.html.HtmlResponseWriterImpl.<init>(java.io.Writer,String,String) ignores return value of java.lang.String.<init>(byte[],String) | CORRECTNESS | RV_RETURN_VALUE_IGNORED | 109 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UISelectOne in org.apache.myfaces.shared_impl.renderkit.html.HtmlRadioRendererBase.encodeEnd(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 59 |
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to class javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_impl.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(javax.faces.context.FacesContext,javax.faces.component.UIComponent,javax.faces.model.SelectItem,Object,javax.faces.convert.Converter,boolean) | STYLE | BC_UNCONFIRMED_CAST | 165 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIOutput in org.apache.myfaces.shared_impl.renderkit.html.HtmlRadioRendererBase.getConvertedValue(javax.faces.context.FacesContext,javax.faces.component.UIComponent,Object) | STYLE | BC_UNCONFIRMED_CAST | 300 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIData in org.apache.myfaces.shared_impl.renderkit.html.HtmlTableRendererBase.encodeBegin(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 108 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIData in org.apache.myfaces.shared_impl.renderkit.html.HtmlTableRendererBase.encodeChildren(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 127 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIData in org.apache.myfaces.shared_impl.renderkit.html.HtmlTableRendererBase.encodeInnerHtml(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 209 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIData in org.apache.myfaces.shared_impl.renderkit.html.HtmlTableRendererBase.encodeEnd(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 528 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIOutput in org.apache.myfaces.shared_impl.renderkit.html.HtmlTextareaRendererBase.getConvertedValue(javax.faces.context.FacesContext,javax.faces.component.UIComponent,Object) | STYLE | BC_UNCONFIRMED_CAST | 92 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIForm in org.apache.myfaces.shared_impl.renderkit.html.HtmlFormRendererBase.encodeBegin(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 98 |
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIForm in org.apache.myfaces.shared_impl.renderkit.html.HtmlFormRendererBase.decode(javax.faces.context.FacesContext,javax.faces.component.UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 222 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to class javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_impl.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(javax.faces.context.FacesContext,javax.faces.component.UIComponent,javax.faces.model.SelectItem,boolean,java.util.Set,javax.faces.convert.Converter,boolean) | STYLE | BC_UNCONFIRMED_CAST | 177 |
Bug | Category | Details | Line |
---|---|---|---|
Null pointer dereference in org.apache.myfaces.shared_impl.renderkit.RendererUtils.loadResourceFile(javax.faces.context.FacesContext,String) | CORRECTNESS | NP_ALWAYS_NULL | 914 |
Null pointer dereference in org.apache.myfaces.shared_impl.renderkit.RendererUtils.loadResourceFile(javax.faces.context.FacesContext,String) | CORRECTNESS | NP_ALWAYS_NULL | 914 |
Possible null pointer dereference in org.apache.myfaces.shared_impl.renderkit.RendererUtils.loadResourceFile(javax.faces.context.FacesContext,String) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 933 |
Test for floating point equality in org.apache.myfaces.shared_impl.renderkit.RendererUtils.isDefaultAttributeValue(Object). | CORRECTNESS | FE_FLOATING_POINT_EQUALITY | 306 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser.parse() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 112 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.shared_impl.util.StateUtils.isSecure(javax.faces.context.ExternalContext) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 146 |
Method org.apache.myfaces.shared_impl.util.StateUtils.symmetric(byte[],javax.faces.context.ExternalContext,int) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 409 |
Method org.apache.myfaces.shared_impl.util.StateUtils.initSecret(javax.servlet.ServletContext) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 529 |
Method org.apache.myfaces.shared_impl.util.StateUtils.getAsObject(byte[],javax.faces.context.ExternalContext) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 319 |
Method org.apache.myfaces.shared_impl.util.StateUtils.symmetric(byte[],javax.crypto.SecretKey,String,String,byte[],int) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 381 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.shared_impl.util.ExceptionUtils.getExceptions(Throwable) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 59 |
Bug | Category | Details | Line |
---|---|---|---|
Should org.apache.myfaces.shared_impl.util.StringUtils.trim(String[]) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 685 |
Bug | Category | Details | Line |
---|---|---|---|
Load of known null value in org.apache.myfaces.shared_impl.util.MessageUtils.getMessage(javax.faces.context.FacesContext,String,Object[]) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 373 |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.shared_impl.util.servlet.SourceCodeServlet is Serializable; consider declaring a serialVersionUID | CORRECTNESS | SE_NO_SERIALVERSIONID | Not available |
Method org.apache.myfaces.shared_impl.util.servlet.SourceCodeServlet.doGet(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 87 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.shared_impl.util.LocaleUtils.converterTagLocaleFromString(String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 136 |
Bug | Category | Details | Line |
---|---|---|---|
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigUnmarshallerImpl$GlobalRule defines field that obscures superclass field org.apache.commons.digester.Rule.digester | CORRECTNESS | MF_CLASS_MASKS_FIELD | Not available |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.config.FacesConfigurator.feedMetaInfServicesFactories() may fail to close stream on exception | CORRECTNESS | OS_OPEN_STREAM_EXCEPTION_PATH | 303 |
Dead store to serialFactory in method org.apache.myfaces.config.FacesConfigurator.handleSerialFactory() | STYLE | DLS_DEAD_LOCAL_STORE | 937 |
Bug | Category | Details | Line |
---|---|---|---|
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to class javax.faces.component.UIOutput in org.apache.myfaces.renderkit.html.HtmlHiddenRenderer.getConvertedValue(javax.faces.context.FacesContext,javax.faces.component.UIComponent,Object) | STYLE | BC_UNCONFIRMED_CAST | 70 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.context.portlet.SessionMap.getAttribute(String) invokes toString() method on a String; just use the String | PERFORMANCE | DM_STRING_TOSTRING | 47 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.context.servlet.ServletExternalContextImpl.<init>(javax.servlet.ServletContext,javax.servlet.ServletRequest,javax.servlet.ServletResponse) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 134 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.context.servlet.ServletExternalContextImpl.<clinit>() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 80 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.context.servlet.SessionMap.getAttribute(String) invokes toString() method on a String; just use the String | PERFORMANCE | DM_STRING_TOSTRING | 47 |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.portlet.SavedRequestAttributes is Serializable; consider declaring a serialVersionUID | CORRECTNESS | SE_NO_SERIALVERSIONID | Not available |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.util.DebugUtils.printAttribute(java.io.PrintStream,String,Object) invokes toString() method on a String; just use the String | PERFORMANCE | DM_STRING_TOSTRING | 360 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.el.ValueBindingImpl.isReadOnly(javax.faces.context.FacesContext) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 158 |
Method org.apache.myfaces.el.ValueBindingImpl.getType(javax.faces.context.FacesContext) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | STYLE | REC_CATCH_EXCEPTION | 224 |
Unchecked/unconfirmed cast from org.apache.commons.el.ArraySuffix to class org.apache.commons.el.PropertySuffix in org.apache.myfaces.el.ValueBindingImpl.resolveToBaseAndProperty(javax.faces.context.FacesContext) | STYLE | BC_UNCONFIRMED_CAST | 500 |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.el.MethodBindingImpl.<init>(javax.faces.application.Application,String,Class[]) may expose internal representation by storing an externally mutable object into org.apache.myfaces.el.MethodBindingImpl._argClasses | MALICIOUS_CODE | EI_EXPOSE_REP2 | 62 |
Bug | Category | Details | Line |
---|---|---|---|
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.getValue(Object,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 90 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.getValue(Object,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 97 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.getValue(Object,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 99 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.getValue(Object,int) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 142 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.getValue(Object,int) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 144 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.setValue(Object,Object,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 180 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.setValue(Object,Object,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 186 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.setValue(Object,Object,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 188 |
Possible null pointer dereference in org.apache.myfaces.el.PropertyResolverImpl.setValue(Object,int,Object) on exception path | CORRECTNESS | NP_NULL_ON_SOME_PATH_EXCEPTION | 238 |
Bug | Category | Details | Line |
---|---|---|---|
org.apache.myfaces.el.ELParserHelper.toJspElExpression(String) invokes dubious new String(String) constructor; just use the argument | PERFORMANCE | DM_STRING_CTOR | 172 |
Bug | Category | Details | Line |
---|---|---|---|
Method org.apache.myfaces.webapp.StartupServletContextListener.initFaces(javax.servlet.ServletContext) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | I18N | DM_CONVERT_CASE | 70 |
org.apache.myfaces.shared_impl.renderkit.html.HtmlRendererUtils.DEFAULT_CHAR_ENCODING isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 1330 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 55 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 67 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 77 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONFOCUS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 85 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 99 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 107 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 120 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 125 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 131 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 135 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 139 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 143 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 147 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 152 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 157 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 162 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.ANCHOR_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 178 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 191 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 195 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 199 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.FORM_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 209 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 218 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.IMG_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 233 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 246 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.INPUT_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 257 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 269 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 274 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.BUTTON_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 290 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 298 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 302 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.LABEL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 313 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 320 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.SELECT_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 328 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 334 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.TABLE_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 346 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 360 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.TEXTAREA_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 369 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 379 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.INPUT_FILE_UPLOAD_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 385 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 389 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.MESSAGE_PASSTHROUGH_ATTRIBUTES_WITHOUT_TITLE_STYLE_AND_STYLE_CLASS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 402 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.SELECT_TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 409 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.UL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 413 |
org.apache.myfaces.shared_impl.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 417 |
org.apache.myfaces.el.ValueBindingImpl.s_functionMapper isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 70 |
Confusing to have methods org.apache.myfaces.config.impl.digester.elements.FacesConfig.addNavigationRule(NavigationRule) and org.apache.myfaces.config.RuntimeConfig.addNavigationRule(org.apache.myfaces.config.element.NavigationRule) | CORRECTNESS | NM_CONFUSING | 79-80 |
Field not initialized in constructor: org.apache.myfaces.config.FacesConfigurator._dispenser | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available |
Field not initialized in constructor: org.apache.myfaces.config.FacesConfigurator._unmarshaller | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available |
Field not initialized in constructor: org.apache.myfaces.config.impl.digester.elements.ManagedProperty._valueBinding | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available |
Field not initialized in constructor: org.apache.myfaces.shared_impl.test.ClassElementHandler.buffer | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available |
Field not initialized in constructor: org.apache.myfaces.shared_impl.util.SelectItemsIterator._currentUISelectItems | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available |
Field not initialized in constructor: org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser._webXml | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available |
Unread field: org.apache.myfaces.application.pss.PartialTreeStructureManager._facesContext | PERFORMANCE | URF_UNREAD_FIELD | Not available |
Unread field: org.apache.myfaces.application.pss.ViewHandlerResponseWrapperHelperImpl.status | PERFORMANCE | URF_UNREAD_FIELD | Not available |
The class org.apache.myfaces.context.servlet.ServletExternalContextImpl$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | Not available |
The class org.apache.myfaces.renderkit.html.HtmlRenderKitImpl$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | Not available |
Inconsistent synchronization of org.apache.myfaces.application.NavigationHandlerImpl._wildcardKeys; locked 50% of time | MT_CORRECTNESS | IS2_INCONSISTENT_SYNC | 248 |