UI-Component Sets

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is low

Effort is min

Summary

ClassesBugsErrorsMissing Classes
82645002

Files

ClassBugs
org.apache.myfaces.application.ApplicationImpl9
org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry2
org.apache.myfaces.application.DefaultResourceHandlerSupport1
org.apache.myfaces.application.NavigationHandlerImpl3
org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator1
org.apache.myfaces.application.ResourceHandlerImpl1
org.apache.myfaces.application.StateManagerImpl1
org.apache.myfaces.application.jsp.JspStateManagerImpl$11
org.apache.myfaces.application.jsp.JspStateManagerImpl$SerializedViewCollection3
org.apache.myfaces.application.jsp.ServletViewResponseWrapper1
org.apache.myfaces.application.viewstate.IntByteArraySerializedViewKey2
org.apache.myfaces.application.viewstate.IntIntSerializedViewKey1
org.apache.myfaces.application.viewstate.RandomKeyFactory1
org.apache.myfaces.application.viewstate.ReferenceSerializedViewKey1
org.apache.myfaces.application.viewstate.SecureRandomKeyFactory1
org.apache.myfaces.application.viewstate.SerializedViewCollection4
org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl$11
org.apache.myfaces.config.DefaultFacesConfigurationMerger$11
org.apache.myfaces.config.FacesConfigValidator1
org.apache.myfaces.config.FacesConfigurator3
org.apache.myfaces.config.ManagedBeanBuilder1
org.apache.myfaces.config.NamedEventManager1
org.apache.myfaces.config.annotation.DefaultAnnotationProvider5
org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider3
org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider4
org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter3
org.apache.myfaces.config.annotation._PackageInfo1
org.apache.myfaces.config.annotation._PackageInfo$11
org.apache.myfaces.config.element.ConfigOthersSlot1
org.apache.myfaces.config.element.FacesConfigNameSlot1
org.apache.myfaces.config.impl.FacesConfigEntityResolver1
org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl35
org.apache.myfaces.config.impl.digester.elements.AbsoluteOrdering4
org.apache.myfaces.config.impl.digester.elements.Application18
org.apache.myfaces.config.impl.digester.elements.Attribute7
org.apache.myfaces.config.impl.digester.elements.Behavior5
org.apache.myfaces.config.impl.digester.elements.ClientBehaviorRenderer3
org.apache.myfaces.config.impl.digester.elements.Component3
org.apache.myfaces.config.impl.digester.elements.ConfigOthersSlot3
org.apache.myfaces.config.impl.digester.elements.Converter5
org.apache.myfaces.config.impl.digester.elements.FacesConfig14
org.apache.myfaces.config.impl.digester.elements.FacesConfigNameSlot3
org.apache.myfaces.config.impl.digester.elements.Factory14
org.apache.myfaces.config.impl.digester.elements.ListEntries4
org.apache.myfaces.config.impl.digester.elements.ListEntries$Entry1
org.apache.myfaces.config.impl.digester.elements.LocaleConfig4
org.apache.myfaces.config.impl.digester.elements.ManagedBean4
org.apache.myfaces.config.impl.digester.elements.ManagedProperty3
org.apache.myfaces.config.impl.digester.elements.MapEntries4
org.apache.myfaces.config.impl.digester.elements.MapEntries$Entry1
org.apache.myfaces.config.impl.digester.elements.NamedEvent3
org.apache.myfaces.config.impl.digester.elements.NavigationCase3
org.apache.myfaces.config.impl.digester.elements.NavigationRule4
org.apache.myfaces.config.impl.digester.elements.OrderSlot3
org.apache.myfaces.config.impl.digester.elements.Ordering5
org.apache.myfaces.config.impl.digester.elements.Property7
org.apache.myfaces.config.impl.digester.elements.Redirect4
org.apache.myfaces.config.impl.digester.elements.RenderKit6
org.apache.myfaces.config.impl.digester.elements.Renderer3
org.apache.myfaces.config.impl.digester.elements.ResourceBundle3
org.apache.myfaces.config.impl.digester.elements.SystemEventListener3
org.apache.myfaces.config.impl.digester.elements.ViewParam3
org.apache.myfaces.config.util.Vertex1
org.apache.myfaces.context.FacesContextFactoryImpl2
org.apache.myfaces.context.MyFacesExceptionHandlerWrapperImpl1
org.apache.myfaces.context.PartialResponseWriterImpl1
org.apache.myfaces.context.PartialResponseWriterImpl$StackEntry1
org.apache.myfaces.context.servlet.PartialViewContextImpl1
org.apache.myfaces.context.servlet.PartialViewContextImpl$PhaseAwareVisitCallback1
org.apache.myfaces.context.servlet.ServletExternalContextImpl2
org.apache.myfaces.el.CompositeELResolver2
org.apache.myfaces.el.ResolverForJSPInitializer1
org.apache.myfaces.el.convert.ValueBindingToValueExpression1
org.apache.myfaces.el.unified.CustomFirstELResolverComparator1
org.apache.myfaces.el.unified.CustomLastELResolverComparator1
org.apache.myfaces.el.unified.OpenWebBeansELResolverComparator1
org.apache.myfaces.el.unified.ResolverBuilderBase1
org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper2
org.apache.myfaces.el.unified.resolver.ResourceBundleResolver1
org.apache.myfaces.lifecycle.DefaultRestoreViewSupport1
org.apache.myfaces.lifecycle.RenderResponseExecutor2
org.apache.myfaces.logging.MyfacesLogMessage1
org.apache.myfaces.renderkit.ErrorPageWriter9
org.apache.myfaces.renderkit.ErrorPageWriter$ErrorPageBean1
org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback3
org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer3
org.apache.myfaces.renderkit.html.HtmlFormatRenderer1
org.apache.myfaces.renderkit.html.HtmlHiddenRenderer1
org.apache.myfaces.renderkit.html.HtmlRenderKitImpl1
org.apache.myfaces.renderkit.html.HtmlResponseStateManager2
org.apache.myfaces.renderkit.html.HtmlScriptRenderer2
org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer2
org.apache.myfaces.shared_impl.util.serial.SerialFactory1
org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser1
org.apache.myfaces.spi.AnnotationProvider2
org.apache.myfaces.spi.AnnotationProviderWrapper3
org.apache.myfaces.spi.FactoryFinderProviderFactory2
org.apache.myfaces.spi.impl.DefaultServiceProviderFinder1
org.apache.myfaces.taglib.core.ConverterImplTag1
org.apache.myfaces.taglib.core.ConverterTag1
org.apache.myfaces.taglib.core.DelegateConverter1
org.apache.myfaces.taglib.core.DelegateValidator1
org.apache.myfaces.taglib.core.DelegateValueChangeListener1
org.apache.myfaces.taglib.core.LoadBundleTag$BundleMap1
org.apache.myfaces.taglib.core.PhaseListenerTag1
org.apache.myfaces.taglib.core.SetPropertyActionListenerTag1
org.apache.myfaces.taglib.core.ValidatorImplTag2
org.apache.myfaces.taglib.core.ValidatorTag2
org.apache.myfaces.util.DebugUtils1
org.apache.myfaces.util.ExternalSpecifications2
org.apache.myfaces.view.ViewDeclarationLanguageFactoryImpl2
org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$11
org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$SerializedViewCollection3
org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy2
org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy$AddComponentCallback1
org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage3
org.apache.myfaces.view.facelets.FaceletViewHandler2
org.apache.myfaces.view.facelets.PostBuildComponentTreeOnRestoreViewEvent1
org.apache.myfaces.view.facelets.StateWriter1
org.apache.myfaces.view.facelets.compiler.AddFacesMessageInstruction1
org.apache.myfaces.view.facelets.compiler.SAXCompiler$11
org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompilationHandler1
org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompositeComponentMetadataHandler1
org.apache.myfaces.view.facelets.compiler.SAXCompiler$ViewMetadataHandler1
org.apache.myfaces.view.facelets.compiler.TagLibraryConfig1
org.apache.myfaces.view.facelets.compiler.TagLibraryConfig$LibraryHandler1
org.apache.myfaces.view.facelets.compiler.UILeaf1
org.apache.myfaces.view.facelets.compiler.UILiteralTextHandler1
org.apache.myfaces.view.facelets.compiler._ComponentUtils1
org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent2
org.apache.myfaces.view.facelets.el.ContextAwareELException1
org.apache.myfaces.view.facelets.el.ContextAwareException1
org.apache.myfaces.view.facelets.el.ContextAwareMethodNotFoundException1
org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotFoundException1
org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotWritableException1
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException1
org.apache.myfaces.view.facelets.el.DefaultFunctionMapper1
org.apache.myfaces.view.facelets.el.ELText1
org.apache.myfaces.view.facelets.el.ELText$ELCacheableTextVariable1
org.apache.myfaces.view.facelets.el.ELText$LiteralValueExpression1
org.apache.myfaces.view.facelets.impl.DefaultFaceletContext2
org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager3
org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory4
org.apache.myfaces.view.facelets.impl.FaceletCompositionContextImpl1
org.apache.myfaces.view.facelets.impl.SectionUniqueIdCounter1
org.apache.myfaces.view.facelets.impl.TemplateContextImpl1
org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateManagerImpl2
org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler2
org.apache.myfaces.view.facelets.tag.CompositeTagDecorator1
org.apache.myfaces.view.facelets.tag.CompositeTagLibrary1
org.apache.myfaces.view.facelets.tag.MetaRulesetImpl2
org.apache.myfaces.view.facelets.tag.MetadataImpl1
org.apache.myfaces.view.facelets.tag.MethodRule1
org.apache.myfaces.view.facelets.tag.MethodRule$MethodExpressionMetadata1
org.apache.myfaces.view.facelets.tag.TagAttributeImpl3
org.apache.myfaces.view.facelets.tag.TagAttributesImpl3
org.apache.myfaces.view.facelets.tag.UserTagHandler3
org.apache.myfaces.view.facelets.tag.composite.ClientBehaviorRedirectEventComponentWrapper1
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentBeanInfo1
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$LiteralAttributeMetadata1
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$TypedLiteralAttributeMetadata1
org.apache.myfaces.view.facelets.tag.composite.InsertFacetHandler3
org.apache.myfaces.view.facelets.tag.jsf.ActionSourceRule1
org.apache.myfaces.view.facelets.tag.jsf.BehaviorTagHandlerDelegate1
org.apache.myfaces.view.facelets.tag.jsf.ComponentRule$LiteralAttributeMetadata1
org.apache.myfaces.view.facelets.tag.jsf.ComponentSupport1
org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate1
org.apache.myfaces.view.facelets.tag.jsf.ConverterTagHandlerDelegate1
org.apache.myfaces.view.facelets.tag.jsf.FaceletState1
org.apache.myfaces.view.facelets.tag.jsf.ValidatorTagHandlerDelegate1
org.apache.myfaces.view.facelets.tag.jsf.core.ActionListenerHandler1
org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler2
org.apache.myfaces.view.facelets.tag.jsf.core.AttributeHandler1
org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler2
org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap1
org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry2
org.apache.myfaces.view.facelets.tag.jsf.core.SelectItemsHandler1
org.apache.myfaces.view.facelets.tag.jsf.core.SetPropertyActionListenerHandler1
org.apache.myfaces.view.facelets.tag.jsf.core.ValueChangeListenerHandler1
org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler$ArrayIterator1
org.apache.myfaces.view.facelets.tag.jstl.core.IfHandler1
org.apache.myfaces.view.facelets.tag.jstl.core.IterationStatusExpression1
org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry2
org.apache.myfaces.view.facelets.tag.jstl.core.SetHandler1
org.apache.myfaces.view.facelets.tag.jstl.fn.JstlFunction3
org.apache.myfaces.view.facelets.tag.ui.CompositionHandler3
org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener2
org.apache.myfaces.view.facelets.tag.ui.InsertHandler1
org.apache.myfaces.view.facelets.tag.ui.RepeatHandler$TagMetaData1
org.apache.myfaces.view.facelets.tag.ui.UIDebug1
org.apache.myfaces.view.facelets.tag.ui.UIDebug$11
org.apache.myfaces.view.facelets.util.Classpath5
org.apache.myfaces.view.facelets.util.ReflectionUtil4
org.apache.myfaces.view.facelets.util.Resource1
org.apache.myfaces.view.jsp.JspViewDeclarationLanguage2
org.apache.myfaces.webapp.AbstractFacesInitializer3
org.apache.myfaces.webapp.Jsp20FacesInitializer$ErrorExpressionFactory1
org.apache.myfaces.webapp.MyFacesServlet1

org.apache.myfaces.application.ApplicationImpl

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.application.ApplicationImpl.addDefaultValidatorId(String), since all Class are instances of ClassSTYLEBC_VACUOUS_INSTANCEOF313Medium
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE282Low
Synchronization performed on java.util.concurrent.ConcurrentHashMap in org.apache.myfaces.application.ApplicationImpl.subscribeToEvent(Class, Class, SystemEventListener)MT_CORRECTNESSJLM_JSR166_UTILCONCURRENT_MONITORENTER983Medium
converterClass could be null and is guaranteed to be dereferenced in org.apache.myfaces.application.ApplicationImpl.internalCreateConverter(Class)CORRECTNESSNP_GUARANTEED_DEREF1614High
Load of known null value in org.apache.myfaces.application.ApplicationImpl.publishEvent(FacesContext, Class, Class, Object)STYLENP_LOAD_OF_KNOWN_NULL_VALUE586Low
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl.internalCreateConverter(Class)STYLEREC_CATCH_EXCEPTION1619Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl._createEvent(Class, Object, SystemEvent)STYLEREC_CATCH_EXCEPTION2114Low
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl.createBehavior(String)STYLEREC_CATCH_EXCEPTION1204Low
Exception is caught when Exception is not thrown in org.apache.myfaces.application.ApplicationImpl.internalCreateConverter(Class)STYLEREC_CATCH_EXCEPTION1639Low

org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry

BugCategoryDetailsLinePriority
Inconsistent synchronization of org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry._lstSystemEventListener; locked 42% of timeMT_CORRECTNESSIS2_INCONSISTENT_SYNC2684Medium
Inconsistent synchronization of org.apache.myfaces.application.ApplicationImpl$SystemListenerEntry._sourceClassMap; locked 40% of timeMT_CORRECTNESSIS2_INCONSISTENT_SYNC2679Medium

org.apache.myfaces.application.DefaultResourceHandlerSupport

BugCategoryDetailsLinePriority
org.apache.myfaces.application.DefaultResourceHandlerSupport.getResourceLoaders() may expose internal representation by returning DefaultResourceHandlerSupport._resourceLoadersMALICIOUS_CODEEI_EXPOSE_REP81Medium

org.apache.myfaces.application.NavigationHandlerImpl

BugCategoryDetailsLinePriority
org.apache.myfaces.application.NavigationHandlerImpl.convertNavigationCasesToAPI(NavigationRule) invokes inefficient Boolean constructor; use Boolean.valueOf(...) insteadPERFORMANCEDM_BOOLEAN_CTOR849Medium
integral division result cast to double or float in org.apache.myfaces.application.NavigationHandlerImpl.getOutcomeNavigationCase(FacesContext, String, String)STYLEICAST_IDIV_CAST_TO_DOUBLE481Medium
Inconsistent synchronization of org.apache.myfaces.application.NavigationHandlerImpl._wildcardKeys; locked 50% of timeMT_CORRECTNESSIS2_INCONSISTENT_SYNC734Low

org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator

BugCategoryDetailsLinePriority
org.apache.myfaces.application.NavigationHandlerImpl$KeyComparator implements Comparator but not SerializableBAD_PRACTICESE_COMPARATOR_SHOULD_BE_SERIALIZABLE828-832Medium

org.apache.myfaces.application.ResourceHandlerImpl

BugCategoryDetailsLinePriority
Redundant nullcheck of resourceBasePath, which is known to be non-null in org.apache.myfaces.application.ResourceHandlerImpl.handleResourceRequest(FacesContext)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE338Low

org.apache.myfaces.application.StateManagerImpl

BugCategoryDetailsLinePriority
Dead store to externalContext in org.apache.myfaces.application.StateManagerImpl.saveView(FacesContext)STYLEDLS_DEAD_LOCAL_STORE231Medium

org.apache.myfaces.application.jsp.JspStateManagerImpl$1

BugCategoryDetailsLinePriority
The class org.apache.myfaces.application.jsp.JspStateManagerImpl$1 could be refactored into a named _static_ inner classPERFORMANCESIC_INNER_SHOULD_BE_STATIC_ANON883-886Low

org.apache.myfaces.application.jsp.JspStateManagerImpl$SerializedViewCollection

BugCategoryDetailsLinePriority
Class org.apache.myfaces.application.jsp.JspStateManagerImpl$SerializedViewCollection defines non-transient non-serializable instance field _keysBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.application.jsp.JspStateManagerImpl$SerializedViewCollection defines non-transient non-serializable instance field _serializedViewsBAD_PRACTICESE_BAD_FIELDNot availableLow
The field org.apache.myfaces.application.jsp.JspStateManagerImpl$SerializedViewCollection._oldSerializedViews is transient but isn't set by deserializationBAD_PRACTICESE_TRANSIENT_FIELD_NOT_RESTOREDNot availableLow

org.apache.myfaces.application.jsp.ServletViewResponseWrapper

BugCategoryDetailsLinePriority
org.apache.myfaces.application.jsp.ServletViewResponseWrapper.toString() may return nullBAD_PRACTICENP_TOSTRING_COULD_RETURN_NULL168Medium

org.apache.myfaces.application.viewstate.IntByteArraySerializedViewKey

BugCategoryDetailsLinePriority
org.apache.myfaces.application.viewstate.IntByteArraySerializedViewKey is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID34-68Low

org.apache.myfaces.application.viewstate.IntIntSerializedViewKey

BugCategoryDetailsLinePriority

org.apache.myfaces.application.viewstate.RandomKeyFactory

BugCategoryDetailsLinePriority
Should org.apache.myfaces.application.viewstate.RandomKeyFactory.decode(String) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS108Low

org.apache.myfaces.application.viewstate.ReferenceSerializedViewKey

BugCategoryDetailsLinePriority

org.apache.myfaces.application.viewstate.SecureRandomKeyFactory

BugCategoryDetailsLinePriority
Should org.apache.myfaces.application.viewstate.SecureRandomKeyFactory.decode(String) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS130Low

org.apache.myfaces.application.viewstate.SerializedViewCollection

BugCategoryDetailsLinePriority
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _keysBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _precedenceBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.application.viewstate.SerializedViewCollection defines non-transient non-serializable instance field _serializedViewsBAD_PRACTICESE_BAD_FIELDNot availableLow
The field org.apache.myfaces.application.viewstate.SerializedViewCollection._oldSerializedViews is transient but isn't set by deserializationBAD_PRACTICESE_TRANSIENT_FIELD_NOT_RESTOREDNot availableLow

org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl$1

BugCategoryDetailsLinePriority
The class org.apache.myfaces.application.viewstate.ServerSideStateCacheImpl$1 could be refactored into a named _static_ inner classPERFORMANCESIC_INNER_SHOULD_BE_STATIC_ANON510-514Low

org.apache.myfaces.config.DefaultFacesConfigurationMerger$1

BugCategoryDetailsLinePriority
The class org.apache.myfaces.config.DefaultFacesConfigurationMerger$1 could be refactored into a named _static_ inner classPERFORMANCESIC_INNER_SHOULD_BE_STATIC_ANON812-855Low

org.apache.myfaces.config.FacesConfigValidator

BugCategoryDetailsLinePriority
Load of known null value in org.apache.myfaces.config.FacesConfigValidator.validateNavRule(NavigationRule, List, ExternalContext)STYLENP_LOAD_OF_KNOWN_NULL_VALUE108Medium

org.apache.myfaces.config.FacesConfigurator

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE624Low
Write to static field org.apache.myfaces.config.FacesConfigurator.lastUpdate from instance method org.apache.myfaces.config.FacesConfigurator.configure()STYLEST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD429Medium

org.apache.myfaces.config.ManagedBeanBuilder

BugCategoryDetailsLinePriority
Switch statement found in org.apache.myfaces.config.ManagedBeanBuilder.initializeProperties(FacesContext, ManagedBean, Object) where default case is missingSTYLESF_SWITCH_NO_DEFAULT321-325Low

org.apache.myfaces.config.NamedEventManager

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE123Low

org.apache.myfaces.config.annotation.DefaultAnnotationProvider

BugCategoryDetailsLinePriority
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getAnnotatedMetaInfClasses(ExternalContext, Set) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS279-299High
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getBaseUrls() is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS224-241High
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getBaseUrls() is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS238High
org.apache.myfaces.config.annotation.DefaultAnnotationProvider.getBaseUrls(ExternalContext) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS247-273High
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE406Low

org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider

BugCategoryDetailsLinePriority
The parameter metadata to org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider.createDeclaredMethodBeansMap(ClassLoader, Map) is dead upon entry but overwrittenCORRECTNESSIP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN76Low
Load of known null value in org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider.getDeclaredMethodBeansMap()STYLENP_LOAD_OF_KNOWN_NULL_VALUE66Medium
Redundant nullcheck of methods, which is known to be non-null in org.apache.myfaces.config.annotation.NoInjectionAnnotationLifecycleProvider.postConstruct(Object)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE121Low

org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider

BugCategoryDetailsLinePriority
org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.lookupFieldResource(Context, Object, Field, String) invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED193Low
org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.lookupMethodResource(Context, Object, Method, String) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED229Low
The parameter metadata to org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.createDeclaredFieldBeansMap(ClassLoader, Map) is dead upon entry but overwrittenCORRECTNESSIP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN77Low
Load of known null value in org.apache.myfaces.config.annotation.ResourceAnnotationLifecycleProvider.getDeclaredFieldBeansMap()STYLENP_LOAD_OF_KNOWN_NULL_VALUE67Medium

org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter

BugCategoryDetailsLinePriority
Method org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter.couldContainAnnotationsOnClassDef(DataInput, Set) uses the same code for two switch clausesSTYLEDB_DUPLICATE_SWITCH_CLAUSES139-140Low
Method org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter.couldContainAnnotationsOnClassDef(DataInput, Set) uses the same code for two switch clausesSTYLEDB_DUPLICATE_SWITCH_CLAUSES146-148Low
Dead store to minorVersion in org.apache.myfaces.config.annotation._ClassByteCodeAnnotationFilter.couldContainAnnotationsOnClassDef(DataInput, Set)STYLEDLS_DEAD_LOCAL_STORE102Medium

org.apache.myfaces.config.annotation._PackageInfo

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE160Low

org.apache.myfaces.config.annotation._PackageInfo$1

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE261Low

org.apache.myfaces.config.element.ConfigOthersSlot

BugCategoryDetailsLinePriority

org.apache.myfaces.config.element.FacesConfigNameSlot

BugCategoryDetailsLinePriority

org.apache.myfaces.config.impl.FacesConfigEntityResolver

BugCategoryDetailsLinePriority
Method call in org.apache.myfaces.config.impl.FacesConfigEntityResolver.resolveEntity(String, String) passes null for nonnull parameter of java.util.jar.JarFile.getInputStream(ZipEntry)CORRECTNESSNP_NULL_PARAM_DEREF91High

org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl

BugCategoryDetailsLinePriority
The field name org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl.ViewDeclarationLanguageFactories doesn't start with a lower case letterBAD_PRACTICENM_FIELD_NAMING_CONVENTIONNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field ViewDeclarationLanguageFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field actionListenersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field applicationFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field behaviorsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field componentsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field converterByClassBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field converterByIdBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field converterConfigurationByClassNameBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field defaultAnnotatedValidatorIdsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field defaultValidatorIdsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field elResolversBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field exceptionHandlerFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field externalContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field faceletCacheFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field facesContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field lifecycleFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field lifecyclePhaseListenersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field managedBeansBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field namedEventsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field navigationHandlersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field navigationRulesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field partialViewContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field propertyResolverBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field renderKitFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field renderKitsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field resourceBundlesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field resourceHandlersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field stateManagersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field systemEventListenersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field tagHandlerDelegateFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field validatorsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field variableResolverBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field viewHandlersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.DigesterFacesConfigDispenserImpl defines non-transient non-serializable instance field visitContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow

org.apache.myfaces.config.impl.digester.elements.AbsoluteOrdering

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.AbsoluteOrdering defines non-transient non-serializable instance field orderListBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.AbsoluteOrdering is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID25-37Low

org.apache.myfaces.config.impl.digester.elements.Application

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field actionListenerBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field defaultRenderkitIdBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field defaultValidatorIdsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field elResolverBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field localeConfigBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field messageBundleBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field navigationHandlerBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field partialTraversalBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field propertyResolverBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field resourceBundleBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field resourceHandlerBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field stateManagerBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field systemEventListenersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field variableResolverBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Application defines non-transient non-serializable instance field viewHandlerBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Application is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID28-206Low

org.apache.myfaces.config.impl.digester.elements.Attribute

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Attribute defines non-transient non-serializable instance field _attributeExtensionBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Attribute defines non-transient non-serializable instance field _descriptionBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Attribute defines non-transient non-serializable instance field _displayNameBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Attribute defines non-transient non-serializable instance field _iconBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Attribute is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID41-170Low

org.apache.myfaces.config.impl.digester.elements.Behavior

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Behavior defines non-transient non-serializable instance field attributesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Behavior defines non-transient non-serializable instance field propertiesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Behavior is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID29-77Low

org.apache.myfaces.config.impl.digester.elements.ClientBehaviorRenderer

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.ClientBehaviorRenderer is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID27-50Low

org.apache.myfaces.config.impl.digester.elements.Component

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.Component is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID27-54Low

org.apache.myfaces.config.impl.digester.elements.ConfigOthersSlot

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.ConfigOthersSlot is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID23Low

org.apache.myfaces.config.impl.digester.elements.Converter

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Converter defines non-transient non-serializable instance field _attributesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Converter defines non-transient non-serializable instance field _propertiesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Converter is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID31-113Low

org.apache.myfaces.config.impl.digester.elements.FacesConfig

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field applicationsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field behaviorsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field componentsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field convertersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field factoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field lifecyclePhaseListenerBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field managedBeansBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field namedEventsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field navigationRulesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field renderKitsBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.FacesConfig defines non-transient non-serializable instance field validatorsBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.FacesConfig is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID30-228Low

org.apache.myfaces.config.impl.digester.elements.FacesConfigNameSlot

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.FacesConfigNameSlot is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID23-35Low

org.apache.myfaces.config.impl.digester.elements.Factory

BugCategoryDetailsLinePriority
The field name org.apache.myfaces.config.impl.digester.elements.Factory.ViewDeclarationLanguageFactories doesn't start with a lower case letterBAD_PRACTICENM_FIELD_NAMING_CONVENTIONNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field ViewDeclarationLanguageFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field applicationFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field exceptionHandlerFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field externalContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field facesContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field lifecycleFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field partialViewContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field renderKitFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field tagHandlerDelegateFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Factory defines non-transient non-serializable instance field visitContextFactoriesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Factory is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID28-138Low

org.apache.myfaces.config.impl.digester.elements.ListEntries

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.ListEntries defines non-transient non-serializable instance field entriesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.ListEntries is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID30-62Low

org.apache.myfaces.config.impl.digester.elements.ListEntries$Entry

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.ListEntries$Entry is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID62-88Low

org.apache.myfaces.config.impl.digester.elements.LocaleConfig

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.LocaleConfig defines non-transient non-serializable instance field supportedLocalesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.LocaleConfig is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID29-56Low

org.apache.myfaces.config.impl.digester.elements.ManagedBean

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.ManagedBean defines non-transient non-serializable instance field propertyBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.ManagedBean is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID36-191Low

org.apache.myfaces.config.impl.digester.elements.ManagedProperty

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.ManagedProperty is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID36-141Medium

org.apache.myfaces.config.impl.digester.elements.MapEntries

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.MapEntries defines non-transient non-serializable instance field entriesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.MapEntries is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID30-72Low

org.apache.myfaces.config.impl.digester.elements.MapEntries$Entry

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.MapEntries$Entry is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID72-111Low

org.apache.myfaces.config.impl.digester.elements.NamedEvent

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.NamedEvent is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID30-51Low

org.apache.myfaces.config.impl.digester.elements.NavigationCase

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.NavigationCase is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID30-93Low

org.apache.myfaces.config.impl.digester.elements.NavigationRule

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.NavigationRule defines non-transient non-serializable instance field navigationCasesBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.NavigationRule is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID32-59Low

org.apache.myfaces.config.impl.digester.elements.OrderSlot

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.OrderSlot is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID23Low

org.apache.myfaces.config.impl.digester.elements.Ordering

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Ordering defines non-transient non-serializable instance field afterListBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Ordering defines non-transient non-serializable instance field beforeListBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Ordering is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID25-48Low

org.apache.myfaces.config.impl.digester.elements.Property

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Property defines non-transient non-serializable instance field _descriptionBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Property defines non-transient non-serializable instance field _displayNameBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Property defines non-transient non-serializable instance field _iconBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.Property defines non-transient non-serializable instance field _propertyExtensionBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Property is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID43-170Low

org.apache.myfaces.config.impl.digester.elements.Redirect

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.Redirect defines non-transient non-serializable instance field viewParamsBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.Redirect is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID30-60Low

org.apache.myfaces.config.impl.digester.elements.RenderKit

BugCategoryDetailsLinePriority
Class org.apache.myfaces.config.impl.digester.elements.RenderKit defines non-transient non-serializable instance field clientBehaviorRenderersBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.RenderKit defines non-transient non-serializable instance field renderKitClassesBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.config.impl.digester.elements.RenderKit defines non-transient non-serializable instance field rendererBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.config.impl.digester.elements.RenderKit is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID28-81Low

org.apache.myfaces.config.impl.digester.elements.Renderer

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.Renderer is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID27-68Low

org.apache.myfaces.config.impl.digester.elements.ResourceBundle

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.ResourceBundle is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID27-73Low

org.apache.myfaces.config.impl.digester.elements.SystemEventListener

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.SystemEventListener is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID24-57Low

org.apache.myfaces.config.impl.digester.elements.ViewParam

BugCategoryDetailsLinePriority
org.apache.myfaces.config.impl.digester.elements.ViewParam is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID24-47Low

org.apache.myfaces.config.util.Vertex

BugCategoryDetailsLinePriority
org.apache.myfaces.config.util.Vertex defines compareTo(Vertex) and uses Object.equals()BAD_PRACTICEEQ_COMPARETO_USE_OBJECT_EQUALS188-201Medium

org.apache.myfaces.context.FacesContextFactoryImpl

BugCategoryDetailsLinePriority
new org.apache.myfaces.context.FacesContextFactoryImpl() invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED86Low
Redundant nullcheck of firstExternalContextInstance which is known to be null in new org.apache.myfaces.context.FacesContextFactoryImpl()STYLERCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE90Low

org.apache.myfaces.context.MyFacesExceptionHandlerWrapperImpl

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.event.SystemEvent to javax.faces.event.ExceptionQueuedEvent in org.apache.myfaces.context.MyFacesExceptionHandlerWrapperImpl.processEvent(SystemEvent)STYLEBC_UNCONFIRMED_CAST329Low

org.apache.myfaces.context.PartialResponseWriterImpl

BugCategoryDetailsLinePriority
Dead store to elem in org.apache.myfaces.context.PartialResponseWriterImpl.popAndEncodeCurrentStackEntry()STYLEDLS_DEAD_LOCAL_STORE194Medium

org.apache.myfaces.context.PartialResponseWriterImpl$StackEntry

BugCategoryDetailsLinePriority
Should org.apache.myfaces.context.PartialResponseWriterImpl$StackEntry be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC80-103Medium

org.apache.myfaces.context.servlet.PartialViewContextImpl

BugCategoryDetailsLinePriority
Redundant nullcheck of updatedComponents which is known to be null in org.apache.myfaces.context.servlet.PartialViewContextImpl.processPartialRendering(UIViewRoot, PhaseId)STYLERCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE499Low

org.apache.myfaces.context.servlet.PartialViewContextImpl$PhaseAwareVisitCallback

BugCategoryDetailsLinePriority
Should org.apache.myfaces.context.servlet.PartialViewContextImpl$PhaseAwareVisitCallback be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC720-817Medium

org.apache.myfaces.context.servlet.ServletExternalContextImpl

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in new org.apache.myfaces.context.servlet.ServletExternalContextImpl(ServletContext, ServletRequest, ServletResponse)STYLEBC_UNCONFIRMED_CAST100Low
Unchecked/unconfirmed cast from javax.servlet.ServletResponse to javax.servlet.http.HttpServletResponse in new org.apache.myfaces.context.servlet.ServletExternalContextImpl(ServletContext, ServletRequest, ServletResponse)STYLEBC_UNCONFIRMED_CAST101Low

org.apache.myfaces.el.CompositeELResolver

BugCategoryDetailsLinePriority
Inconsistent synchronization of org.apache.myfaces.el.CompositeELResolver._elResolvers; locked 75% of timeMT_CORRECTNESSIS2_INCONSISTENT_SYNC42Low

org.apache.myfaces.el.ResolverForJSPInitializer

BugCategoryDetailsLinePriority
Class org.apache.myfaces.el.ResolverForJSPInitializer defines non-transient non-serializable instance field _resolverForJSPBAD_PRACTICESE_BAD_FIELDNot availableLow

org.apache.myfaces.el.convert.ValueBindingToValueExpression

BugCategoryDetailsLinePriority
Class org.apache.myfaces.el.convert.ValueBindingToValueExpression defines non-transient non-serializable instance field _valueBindingBAD_PRACTICESE_BAD_FIELDNot availableMedium

org.apache.myfaces.el.unified.CustomFirstELResolverComparator

BugCategoryDetailsLinePriority
org.apache.myfaces.el.unified.CustomFirstELResolverComparator implements Comparator but not SerializableBAD_PRACTICESE_COMPARATOR_SHOULD_BE_SERIALIZABLE39-101Low

org.apache.myfaces.el.unified.CustomLastELResolverComparator

BugCategoryDetailsLinePriority
org.apache.myfaces.el.unified.CustomLastELResolverComparator implements Comparator but not SerializableBAD_PRACTICESE_COMPARATOR_SHOULD_BE_SERIALIZABLE34-42Low

org.apache.myfaces.el.unified.OpenWebBeansELResolverComparator

BugCategoryDetailsLinePriority
org.apache.myfaces.el.unified.OpenWebBeansELResolverComparator implements Comparator but not SerializableBAD_PRACTICESE_COMPARATOR_SHOULD_BE_SERIALIZABLE33-48Medium

org.apache.myfaces.el.unified.ResolverBuilderBase

BugCategoryDetailsLinePriority
Redundant nullcheck of facesContext, which is known to be non-null in org.apache.myfaces.el.unified.ResolverBuilderBase.addFromRuntimeConfig(List)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE106Low

org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper

BugCategoryDetailsLinePriority
Should org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC271-415Medium
Method org.apache.myfaces.el.unified.resolver.CompositeComponentELResolver$CompositeComponentAttributesMapWrapper.putAll(Map) makes inefficient use of keySet iterator instead of entrySet iteratorPERFORMANCEWMI_WRONG_MAP_ITERATOR399Medium

org.apache.myfaces.el.unified.resolver.ResourceBundleResolver

BugCategoryDetailsLinePriority
Redundant nullcheck of base which is known to be null in org.apache.myfaces.el.unified.resolver.ResourceBundleResolver.setValue(ELContext, Object, Object, Object)STYLERCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE70Low

org.apache.myfaces.lifecycle.DefaultRestoreViewSupport

BugCategoryDetailsLinePriority
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.lifecycle.DefaultRestoreViewSupport.deriveViewId(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE285Low

org.apache.myfaces.lifecycle.RenderResponseExecutor

BugCategoryDetailsLinePriority
Comparison of String objects using == or != in org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(FacesContext) BAD_PRACTICEES_COMPARING_STRINGS_WITH_EQ96Low
Load of known null value in org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(FacesContext)STYLENP_LOAD_OF_KNOWN_NULL_VALUE96Medium

org.apache.myfaces.logging.MyfacesLogMessage

BugCategoryDetailsLinePriority
org.apache.myfaces.logging.MyfacesLogMessage is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID29-42Low

org.apache.myfaces.renderkit.ErrorPageWriter

BugCategoryDetailsLinePriority
Method org.apache.myfaces.renderkit.ErrorPageWriter._writeVariables(Writer, Map, String) invokes toString() method on a StringPERFORMANCEDM_STRING_TOSTRING792Low
Incorrect lazy initialization of static field org.apache.myfaces.renderkit.ErrorPageWriter.debugParts in org.apache.myfaces.renderkit.ErrorPageWriter._init(FacesContext)MT_CORRECTNESSLI_LAZY_INIT_STATIC624-626Low
Incorrect lazy initialization of static field org.apache.myfaces.renderkit.ErrorPageWriter.errorParts in org.apache.myfaces.renderkit.ErrorPageWriter._init(FacesContext)MT_CORRECTNESSLI_LAZY_INIT_STATIC619-621Low
org.apache.myfaces.renderkit.ErrorPageWriter.handleThrowable(FacesContext, Throwable) may fail to close streamBAD_PRACTICEOS_OPEN_STREAM537Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._writeAttributes(Writer, UIComponent, boolean)STYLEREC_CATCH_EXCEPTION1352High
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._initCauseIfAvailable(Throwable, Throwable)STYLEREC_CATCH_EXCEPTION1446Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._initCausePerReflection(Throwable, String)STYLEREC_CATCH_EXCEPTION1427Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._writeAttributes(Writer, UIComponent, boolean)STYLEREC_CATCH_EXCEPTION1332Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter._writeAttributes(Writer, UIComponent, boolean)STYLEREC_CATCH_EXCEPTION1332Low

org.apache.myfaces.renderkit.ErrorPageWriter$ErrorPageBean

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter$ErrorPageBean.getErrorPageHtml()STYLEREC_CATCH_EXCEPTION157Low

org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback

BugCategoryDetailsLinePriority
org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback.visit(VisitContext, UIComponent) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED1002Low
Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.ErrorPageWriter$ExtendedComponentTreeVisitCallback.visit(VisitContext, UIComponent)STYLEREC_CATCH_EXCEPTION1005Medium

org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.behavior.ClientBehavior to javax.faces.component.behavior.AjaxBehavior in org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer.decode(FacesContext, UIComponent, ClientBehavior)STYLEBC_UNCONFIRMED_CAST80Low
Unchecked/unconfirmed cast from javax.faces.component.behavior.ClientBehavior to javax.faces.component.behavior.AjaxBehavior in org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer.getScript(ClientBehaviorContext, ClientBehavior)STYLEBC_UNCONFIRMED_CAST94Low
Method org.apache.myfaces.renderkit.html.HtmlAjaxBehaviorRenderer.makeAjax(ClientBehaviorContext, AjaxBehavior) invokes toString() method on a StringPERFORMANCEDM_STRING_TOSTRING215Low

org.apache.myfaces.renderkit.html.HtmlFormatRenderer

BugCategoryDetailsLinePriority
Check for sign of bitwise operation in org.apache.myfaces.renderkit.html.HtmlFormatRenderer.encodeEnd(FacesContext, UIComponent)BAD_PRACTICEBIT_SIGNED_CHECK105Medium

org.apache.myfaces.renderkit.html.HtmlHiddenRenderer

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.renderkit.html.HtmlHiddenRenderer.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST74Low

org.apache.myfaces.renderkit.html.HtmlRenderKitImpl

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.renderkit.html.HtmlRenderKitImpl.checkNull(Object, String) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD361-365Low

org.apache.myfaces.renderkit.html.HtmlResponseStateManager

BugCategoryDetailsLinePriority
Load of known null value in org.apache.myfaces.renderkit.html.HtmlResponseStateManager.getSavedState(FacesContext)STYLENP_LOAD_OF_KNOWN_NULL_VALUE288Medium
Redundant nullcheck of state which is known to be null in org.apache.myfaces.renderkit.html.HtmlResponseStateManager.getViewState(FacesContext, Object)STYLERCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE327Medium

org.apache.myfaces.renderkit.html.HtmlScriptRenderer

BugCategoryDetailsLinePriority
Load of known null value in org.apache.myfaces.renderkit.html.HtmlScriptRenderer.encodeEnd(FacesContext, UIComponent)STYLENP_LOAD_OF_KNOWN_NULL_VALUE228Medium
Repeated conditional test in org.apache.myfaces.renderkit.html.HtmlScriptRenderer.processEvent(ComponentSystemEvent)CORRECTNESSRpC_REPEATED_CONDITIONAL_TEST101Low

org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer

BugCategoryDetailsLinePriority
Load of known null value in org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer.encodeEnd(FacesContext, UIComponent)STYLENP_LOAD_OF_KNOWN_NULL_VALUE203Medium
Repeated conditional test in org.apache.myfaces.renderkit.html.HtmlStylesheetRenderer.processEvent(ComponentSystemEvent)CORRECTNESSRpC_REPEATED_CONDITIONAL_TEST100Low

org.apache.myfaces.shared_impl.util.serial.SerialFactory

BugCategoryDetailsLinePriority

org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared_impl.webapp.webxml.WebXmlParser.parse()STYLEREC_CATCH_EXCEPTION114Low

org.apache.myfaces.spi.AnnotationProvider

BugCategoryDetailsLinePriority
org.apache.myfaces.spi.AnnotationProvider.getBaseUrls() is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLSNot availableHigh
org.apache.myfaces.spi.AnnotationProvider.getBaseUrls(ExternalContext) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS111High

org.apache.myfaces.spi.AnnotationProviderWrapper

BugCategoryDetailsLinePriority
org.apache.myfaces.spi.AnnotationProviderWrapper.getBaseUrls() is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS53High
org.apache.myfaces.spi.AnnotationProviderWrapper.getBaseUrls(ExternalContext) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS58High

org.apache.myfaces.spi.FactoryFinderProviderFactory

BugCategoryDetailsLinePriority
org.apache.myfaces.spi.FactoryFinderProviderFactory.setInstance(FactoryFinderProviderFactory) invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED152Low
Exception is caught when Exception is not thrown in org.apache.myfaces.spi.FactoryFinderProviderFactory.setInstance(FactoryFinderProviderFactory)STYLEREC_CATCH_EXCEPTION172Low

org.apache.myfaces.spi.impl.DefaultServiceProviderFinder

BugCategoryDetailsLinePriority
org.apache.myfaces.spi.impl.DefaultServiceProviderFinder.getURLs(String) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS50-70High

org.apache.myfaces.taglib.core.ConverterImplTag

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ConverterImplTag.createClassicConverter()STYLEREC_CATCH_EXCEPTION153Low

org.apache.myfaces.taglib.core.ConverterTag

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ConverterTag.createConverter()STYLEREC_CATCH_EXCEPTION124Low

org.apache.myfaces.taglib.core.DelegateConverter

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.DelegateConverter._createConverter()STYLEREC_CATCH_EXCEPTION155Low

org.apache.myfaces.taglib.core.DelegateValidator

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.DelegateValidator._createValidator()STYLEREC_CATCH_EXCEPTION132Low

org.apache.myfaces.taglib.core.DelegateValueChangeListener

BugCategoryDetailsLinePriority
Load of known null value in org.apache.myfaces.taglib.core.DelegateValueChangeListener._createValueChangeListener()STYLENP_LOAD_OF_KNOWN_NULL_VALUE137Low

org.apache.myfaces.taglib.core.LoadBundleTag$BundleMap

BugCategoryDetailsLinePriority
Redundant nullcheck of java.util.ResourceBundle.getObject(String), which is known to be non-null in org.apache.myfaces.taglib.core.LoadBundleTag$BundleMap.containsKey(Object)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE186Low

org.apache.myfaces.taglib.core.PhaseListenerTag

BugCategoryDetailsLinePriority
org.apache.myfaces.taglib.core.PhaseListenerTag is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID48-144Low

org.apache.myfaces.taglib.core.SetPropertyActionListenerTag

BugCategoryDetailsLinePriority
org.apache.myfaces.taglib.core.SetPropertyActionListenerTag is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID41-130Low

org.apache.myfaces.taglib.core.ValidatorImplTag

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ValidatorImplTag.createClassicValidator()STYLEREC_CATCH_EXCEPTION151Low
org.apache.myfaces.taglib.core.ValidatorImplTag is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID55-164Low

org.apache.myfaces.taglib.core.ValidatorTag

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.taglib.core.ValidatorTag.createValidator()STYLEREC_CATCH_EXCEPTION107Low
org.apache.myfaces.taglib.core.ValidatorTag is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID36-120Low

org.apache.myfaces.util.DebugUtils

BugCategoryDetailsLinePriority
Method org.apache.myfaces.util.DebugUtils.printAttribute(PrintStream, String, Object) invokes toString() method on a StringPERFORMANCEDM_STRING_TOSTRING355Low

org.apache.myfaces.util.ExternalSpecifications

BugCategoryDetailsLinePriority
Incorrect lazy initialization and update of static field org.apache.myfaces.util.ExternalSpecifications.unifiedELAvailable in org.apache.myfaces.util.ExternalSpecifications.isUnifiedELAvailable()MT_CORRECTNESSLI_LAZY_INIT_UPDATE_STATIC104-111High
Incorrect lazy initialization and update of static field org.apache.myfaces.util.ExternalSpecifications.beanValidationAvailable in org.apache.myfaces.util.ExternalSpecifications.isBeanValidationAvailable()MT_CORRECTNESSLI_LAZY_INIT_UPDATE_STATIC55-61Medium

org.apache.myfaces.view.ViewDeclarationLanguageFactoryImpl

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE149Low
org.apache.myfaces.view.ViewDeclarationLanguageFactoryImpl._supportedLanguages is a volatile reference to an array; the array elements are non-volatileMT_CORRECTNESSVO_VOLATILE_REFERENCE_TO_ARRAYNot availableLow

org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$1

BugCategoryDetailsLinePriority
The class org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$1 could be refactored into a named _static_ inner classPERFORMANCESIC_INNER_SHOULD_BE_STATIC_ANON376-379Low

org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$SerializedViewCollection

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$SerializedViewCollection defines non-transient non-serializable instance field _keysBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$SerializedViewCollection defines non-transient non-serializable instance field _serializedViewsBAD_PRACTICESE_BAD_FIELDNot availableLow
The field org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementHelper$SerializedViewCollection._oldSerializedViews is transient but isn't set by deserializationBAD_PRACTICESE_TRANSIENT_FIELD_NOT_RESTOREDNot availableLow

org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy

BugCategoryDetailsLinePriority
Dead store to externalContext in org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy.saveView(FacesContext)STYLEDLS_DEAD_LOCAL_STORE556Medium
Redundant nullcheck of state, which is known to be non-null in org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy.restoreView(FacesContext, String, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE258Low

org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy$AddComponentCallback

BugCategoryDetailsLinePriority
new org.apache.myfaces.view.facelets.DefaultFaceletsStateManagementStrategy$AddComponentCallback(Object[]) may expose internal representation by storing an externally mutable object into DefaultFaceletsStateManagementStrategy$AddComponentCallback.addedStateMALICIOUS_CODEEI_EXPOSE_REP2500Medium

org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage

BugCategoryDetailsLinePriority
Dead store to request in org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage.getResponseEncoding(FacesContext, String)STYLEDLS_DEAD_LOCAL_STORE2049Medium
Load of known null value in org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage.buildView(FacesContext, UIViewRoot)STYLENP_LOAD_OF_KNOWN_NULL_VALUE362Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.FaceletViewDeclarationLanguage.loadDecorators(FacesContext, Compiler)STYLEREC_CATCH_EXCEPTION2170Low

org.apache.myfaces.view.facelets.FaceletViewHandler

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.FaceletViewHandler.initializeCompiler(Compiler)STYLEREC_CATCH_EXCEPTION330Low
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.FaceletViewHandler.renderView(FacesContext, UIViewRoot)STYLEREC_CATCH_EXCEPTION712Low

org.apache.myfaces.view.facelets.PostBuildComponentTreeOnRestoreViewEvent

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.PostBuildComponentTreeOnRestoreViewEvent is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID44-53Low

org.apache.myfaces.view.facelets.StateWriter

BugCategoryDetailsLinePriority
StateWriter.fast not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.view.facelets.compiler.AddFacesMessageInstruction

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.el.ELContext to org.apache.myfaces.view.facelets.AbstractFaceletContext in org.apache.myfaces.view.facelets.compiler.AddFacesMessageInstruction.apply(ExpressionFactory, ELContext)STYLEBC_UNCONFIRMED_CAST55Low

org.apache.myfaces.view.facelets.compiler.SAXCompiler$1

BugCategoryDetailsLinePriority
The class org.apache.myfaces.view.facelets.compiler.SAXCompiler$1 could be refactored into a named _static_ inner classPERFORMANCESIC_INNER_SHOULD_BE_STATIC_ANON736-740Low

org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompilationHandler

BugCategoryDetailsLinePriority
SAXCompiler$CompilationHandler.locator not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.view.facelets.compiler.SAXCompiler$CompositeComponentMetadataHandler

BugCategoryDetailsLinePriority
SAXCompiler$CompositeComponentMetadataHandler.locator not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.view.facelets.compiler.SAXCompiler$ViewMetadataHandler

BugCategoryDetailsLinePriority
SAXCompiler$ViewMetadataHandler.locator not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.view.facelets.compiler.TagLibraryConfig

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.compiler.TagLibraryConfig is final but declares protected field org.apache.myfaces.view.facelets.compiler.TagLibraryConfig.logSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.compiler.TagLibraryConfig$LibraryHandler

BugCategoryDetailsLinePriority
TagLibraryConfig$LibraryHandler.locator not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.view.facelets.compiler.UILeaf

BugCategoryDetailsLinePriority
Should org.apache.myfaces.view.facelets.compiler.UILeaf.getFacesListeners(Class) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS520Low

org.apache.myfaces.view.facelets.compiler.UILiteralTextHandler

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.compiler.UILiteralTextHandler is final but declares protected field org.apache.myfaces.view.facelets.compiler.UILiteralTextHandler.txtStringSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.compiler._ComponentUtils

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.view.facelets.compiler._ComponentUtils.dynamicIdIsEqual(String, String) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD265Low

org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent is serializable but also an inner class of a non-serializable classBAD_PRACTICESE_BAD_FIELD_INNER_CLASS1351-1412Low
org.apache.myfaces.view.facelets.component.UIRepeat$IndexedEvent is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID1351-1412Low

org.apache.myfaces.view.facelets.el.ContextAwareELException

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwareELException._delegateBAD_PRACTICESE_BAD_FIELD_STORE49Medium

org.apache.myfaces.view.facelets.el.ContextAwareException

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwareException._delegateBAD_PRACTICESE_BAD_FIELD_STORE44Medium

org.apache.myfaces.view.facelets.el.ContextAwareMethodNotFoundException

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwareMethodNotFoundException._delegateBAD_PRACTICESE_BAD_FIELD_STORE49Medium

org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotFoundException

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwarePropertyNotFoundException._delegateBAD_PRACTICESE_BAD_FIELD_STORE51Medium

org.apache.myfaces.view.facelets.el.ContextAwarePropertyNotWritableException

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.DefaultContextAwareELException stored into non-transient field ContextAwarePropertyNotWritableException._delegateBAD_PRACTICESE_BAD_FIELD_STORE40Medium

org.apache.myfaces.view.facelets.el.DefaultContextAwareELException

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.el.DefaultContextAwareELException is not derived from an Exception, even though it is named as suchBAD_PRACTICENM_CLASS_NOT_EXCEPTION28-60Medium

org.apache.myfaces.view.facelets.el.DefaultFunctionMapper

BugCategoryDetailsLinePriority

org.apache.myfaces.view.facelets.el.ELText

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.ELText.parse(ExpressionFactory, ELContext, String) invokes inefficient new String(String) constructorPERFORMANCEDM_STRING_CTOR514Medium

org.apache.myfaces.view.facelets.el.ELText$ELCacheableTextVariable

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.el.ELContext to org.apache.myfaces.view.facelets.AbstractFaceletContext in org.apache.myfaces.view.facelets.el.ELText$ELCacheableTextVariable.apply(ExpressionFactory, ELContext)STYLEBC_UNCONFIRMED_CAST252Low

org.apache.myfaces.view.facelets.el.ELText$LiteralValueExpression

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.el.ELText$LiteralValueExpression.equals(Object) always returns falseCORRECTNESSEQ_ALWAYS_FALSE79High

org.apache.myfaces.view.facelets.impl.DefaultFaceletContext

BugCategoryDetailsLinePriority
Method org.apache.myfaces.view.facelets.impl.DefaultFaceletContext.generateUniqueId(String) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR303Medium
Bad attempt to compute absolute value of signed 32-bit hashcode in org.apache.myfaces.view.facelets.impl.DefaultFaceletContext.generateUniqueId(String)CORRECTNESSRV_ABSOLUTE_VALUE_OF_HASHCODE303High

org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager is final but declares protected field org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager._targetSTYLECI_CONFUSED_INHERITANCENot availableLow
org.apache.myfaces.view.facelets.impl.DefaultFaceletContext$CompositeComponentTemplateManager.equals(Object) is unusualSTYLEEQ_UNUSUAL708Medium

org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory is final but declares protected field org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.logSTYLECI_CONFUSED_INHERITANCENot availableLow
Redundant nullcheck of url, which is known to be non-null in org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.getCompositeComponentMetadataFacelet(String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE419Low
Redundant nullcheck of url, which is known to be non-null in org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.getFacelet(String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE130Low
Redundant nullcheck of url, which is known to be non-null in org.apache.myfaces.view.facelets.impl.DefaultFaceletFactory.getViewMetadataFacelet(String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE366Low

org.apache.myfaces.view.facelets.impl.FaceletCompositionContextImpl

BugCategoryDetailsLinePriority
Redundant nullcheck of id which is known to be null in org.apache.myfaces.view.facelets.impl.FaceletCompositionContextImpl.removeComponentForDeletion(UIComponent)STYLERCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE838Low

org.apache.myfaces.view.facelets.impl.SectionUniqueIdCounter

BugCategoryDetailsLinePriority
new org.apache.myfaces.view.facelets.impl.SectionUniqueIdCounter(String, String[]) may expose internal representation by storing an externally mutable object into SectionUniqueIdCounter._uniqueIdsCacheMALICIOUS_CODEEI_EXPOSE_REP279Medium

org.apache.myfaces.view.facelets.impl.TemplateContextImpl

BugCategoryDetailsLinePriority
Call to equals() comparing different types in org.apache.myfaces.view.facelets.impl.TemplateContextImpl.includeDefinition(FaceletContext, Facelet, UIComponent, String)CORRECTNESSEC_UNRELATED_TYPES127High

org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateManagerImpl

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.impl.TemplateContextImpl$TemplateManagerImpl.equals(Object) is unusualSTYLEEQ_UNUSUAL216-222Medium

org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler.getHandlers() may expose internal representation by returning CompositeFaceletHandler.childrenMALICIOUS_CODEEI_EXPOSE_REP61Medium
new org.apache.myfaces.view.facelets.tag.CompositeFaceletHandler(FaceletHandler[]) may expose internal representation by storing an externally mutable object into CompositeFaceletHandler.childrenMALICIOUS_CODEEI_EXPOSE_REP246Medium

org.apache.myfaces.view.facelets.tag.CompositeTagDecorator

BugCategoryDetailsLinePriority
new org.apache.myfaces.view.facelets.tag.CompositeTagDecorator(TagDecorator[]) may expose internal representation by storing an externally mutable object into CompositeTagDecorator.decoratorsMALICIOUS_CODEEI_EXPOSE_REP241Medium

org.apache.myfaces.view.facelets.tag.CompositeTagLibrary

BugCategoryDetailsLinePriority
new org.apache.myfaces.view.facelets.tag.CompositeTagLibrary(TagLibrary[]) may expose internal representation by storing an externally mutable object into CompositeTagLibrary.librariesMALICIOUS_CODEEI_EXPOSE_REP244Medium

org.apache.myfaces.view.facelets.tag.MetaRulesetImpl

BugCategoryDetailsLinePriority
The parameter metadata to org.apache.myfaces.view.facelets.tag.MetaRulesetImpl.createMetaData(ClassLoader, Map) is dead upon entry but overwrittenCORRECTNESSIP_PARAMETER_IS_DEAD_BUT_OVERWRITTEN95Medium
Load of known null value in org.apache.myfaces.view.facelets.tag.MetaRulesetImpl.getMetaData()STYLENP_LOAD_OF_KNOWN_NULL_VALUE86Medium

org.apache.myfaces.view.facelets.tag.MetadataImpl

BugCategoryDetailsLinePriority
new org.apache.myfaces.view.facelets.tag.MetadataImpl(Metadata[]) may expose internal representation by storing an externally mutable object into MetadataImpl._mappersMALICIOUS_CODEEI_EXPOSE_REP236Medium

org.apache.myfaces.view.facelets.tag.MethodRule

BugCategoryDetailsLinePriority
new org.apache.myfaces.view.facelets.tag.MethodRule(String, Class, Class[]) may expose internal representation by storing an externally mutable object into MethodRule.paramsMALICIOUS_CODEEI_EXPOSE_REP251Medium

org.apache.myfaces.view.facelets.tag.MethodRule$MethodExpressionMetadata

BugCategoryDetailsLinePriority
Should org.apache.myfaces.view.facelets.tag.MethodRule$MethodExpressionMetadata be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC83-106Medium

org.apache.myfaces.view.facelets.tag.TagAttributeImpl

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.tag.TagAttributeImpl.getMethodExpression(FaceletContext, Class, Class[])STYLEREC_CATCH_EXCEPTION309Medium
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.tag.TagAttributeImpl.getValueExpression(FaceletContext, Class)STYLEREC_CATCH_EXCEPTION525Low
org.apache.myfaces.view.facelets.tag.TagAttributeImpl.cachedExpression is a volatile reference to an array; the array elements are non-volatileMT_CORRECTNESSVO_VOLATILE_REFERENCE_TO_ARRAYNot availableLow

org.apache.myfaces.view.facelets.tag.TagAttributesImpl

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.TagAttributesImpl.getAll() may expose internal representation by returning TagAttributesImpl._attributesMALICIOUS_CODEEI_EXPOSE_REP97Medium
org.apache.myfaces.view.facelets.tag.TagAttributesImpl.getNamespaces() may expose internal representation by returning TagAttributesImpl._namespacesMALICIOUS_CODEEI_EXPOSE_REP176Medium
new org.apache.myfaces.view.facelets.tag.TagAttributesImpl(TagAttribute[]) may expose internal representation by storing an externally mutable object into TagAttributesImpl._attributesMALICIOUS_CODEEI_EXPOSE_REP258Medium

org.apache.myfaces.view.facelets.tag.UserTagHandler

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.UserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.UserTagHandler._handlersSTYLECI_CONFUSED_INHERITANCENot availableLow
Class org.apache.myfaces.view.facelets.tag.UserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.UserTagHandler._locationSTYLECI_CONFUSED_INHERITANCENot availableLow
Class org.apache.myfaces.view.facelets.tag.UserTagHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.UserTagHandler._varsSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.tag.composite.ClientBehaviorRedirectEventComponentWrapper

BugCategoryDetailsLinePriority
Should org.apache.myfaces.view.facelets.tag.composite.ClientBehaviorRedirectEventComponentWrapper.getFacesListeners(Class) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS424Low

org.apache.myfaces.view.facelets.tag.composite.CompositeComponentBeanInfo

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.composite.CompositeComponentBeanInfo.getPropertyDescriptors() may expose internal representation by returning CompositeComponentBeanInfo._propertyDescriptorsArrayMALICIOUS_CODEEI_EXPOSE_REP145Medium

org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$LiteralAttributeMetadata

BugCategoryDetailsLinePriority
Should org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$LiteralAttributeMetadata be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC47-57Medium

org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$TypedLiteralAttributeMetadata

BugCategoryDetailsLinePriority
Should org.apache.myfaces.view.facelets.tag.composite.CompositeComponentRule$TypedLiteralAttributeMetadata be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC67-76Medium

org.apache.myfaces.view.facelets.tag.composite.InsertFacetHandler

BugCategoryDetailsLinePriority
Dead store to parentCompositeComponent in org.apache.myfaces.view.facelets.tag.composite.InsertFacetHandler.apply(FaceletContext, UIComponent)STYLEDLS_DEAD_LOCAL_STORE153Medium
org.apache.myfaces.view.facelets.tag.composite.InsertFacetHandler.INSERT_FACET_KEYS isn't final but should beMALICIOUS_CODEMS_SHOULD_BE_FINAL63High
org.apache.myfaces.view.facelets.tag.composite.InsertFacetHandler.INSERT_FACET_USED isn't final but should beMALICIOUS_CODEMS_SHOULD_BE_FINAL57High

org.apache.myfaces.view.facelets.tag.jsf.ActionSourceRule

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.jsf.ActionSourceRule.ACTION_LISTENER_SIG should be package protectedMALICIOUS_CODEMS_PKGPROTECT45Medium

org.apache.myfaces.view.facelets.tag.jsf.BehaviorTagHandlerDelegate

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.behavior.ClientBehaviorHolder in org.apache.myfaces.view.facelets.tag.jsf.BehaviorTagHandlerDelegate.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST151Low

org.apache.myfaces.view.facelets.tag.jsf.ComponentRule$LiteralAttributeMetadata

BugCategoryDetailsLinePriority
Should org.apache.myfaces.view.facelets.tag.jsf.ComponentRule$LiteralAttributeMetadata be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC45-53Medium

org.apache.myfaces.view.facelets.tag.jsf.ComponentSupport

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE239Low

org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate

BugCategoryDetailsLinePriority
Redundant nullcheck of parent, which is known to be non-null in org.apache.myfaces.view.facelets.tag.jsf.ComponentTagHandlerDelegate.apply(FaceletContext, UIComponent)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE323Low

org.apache.myfaces.view.facelets.tag.jsf.ConverterTagHandlerDelegate

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ValueHolder in org.apache.myfaces.view.facelets.tag.jsf.ConverterTagHandlerDelegate.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST135Low

org.apache.myfaces.view.facelets.tag.jsf.FaceletState

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.jsf.FaceletState defines non-transient non-serializable instance field stateMapBAD_PRACTICESE_BAD_FIELDNot availableLow

org.apache.myfaces.view.facelets.tag.jsf.ValidatorTagHandlerDelegate

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.EditableValueHolder in org.apache.myfaces.view.facelets.tag.jsf.ValidatorTagHandlerDelegate.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST259Low

org.apache.myfaces.view.facelets.tag.jsf.core.ActionListenerHandler

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.view.facelets.tag.jsf.core.ActionListenerHandler.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST192Low

org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.behavior.ClientBehaviorHolder in org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST318Low
org.apache.myfaces.view.facelets.tag.jsf.core.AjaxHandler.AJAX_BEHAVIOR_LISTENER_SIG should be package protectedMALICIOUS_CODEMS_PKGPROTECT90Medium

org.apache.myfaces.view.facelets.tag.jsf.core.AttributeHandler

BugCategoryDetailsLinePriority

org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.FacetHandler.nameSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap.bundleSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry.keySTYLECI_CONFUSED_INHERITANCENot availableLow
Class org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry is final but declares protected field org.apache.myfaces.view.facelets.tag.jsf.core.LoadBundleHandler$ResourceBundleMap$ResourceEntry.valueSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.tag.jsf.core.SelectItemsHandler

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.view.facelets.tag.jsf.core.SelectItemsHandler.getNoSelectionValue() is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD54Low

org.apache.myfaces.view.facelets.tag.jsf.core.SetPropertyActionListenerHandler

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.view.facelets.tag.jsf.core.SetPropertyActionListenerHandler.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST171Low

org.apache.myfaces.view.facelets.tag.jsf.core.ValueChangeListenerHandler

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.EditableValueHolder in org.apache.myfaces.view.facelets.tag.jsf.core.ValueChangeListenerHandler.applyAttachedObject(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST181Low

org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler$ArrayIterator

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.jstl.core.ForEachHandler$ArrayIterator.next() can't throw NoSuchElementExceptionBAD_PRACTICEIT_NO_SUCH_ELEMENT83Medium

org.apache.myfaces.view.facelets.tag.jstl.core.IfHandler

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.jstl.core.IfHandler.apply(FaceletContext, UIComponent) invokes inefficient Boolean constructor; use Boolean.valueOf(...) insteadPERFORMANCEDM_BOOLEAN_CTOR110Medium

org.apache.myfaces.view.facelets.tag.jstl.core.IterationStatusExpression

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.tag.jstl.core.IterationStatusExpression.equals(Object) checks for operand being a IterationStatus BAD_PRACTICEEQ_CHECK_FOR_OPERAND_NOT_COMPATIBLE_WITH_THIS113High

org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry defines non-transient non-serializable instance field srcBAD_PRACTICESE_BAD_FIELDNot availableLow
org.apache.myfaces.view.facelets.tag.jstl.core.MappedValueExpression$Entry is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID39-56Low

org.apache.myfaces.view.facelets.tag.jstl.core.SetHandler

BugCategoryDetailsLinePriority
Nullcheck of SetHandler.value at line 150 of value previously dereferenced in org.apache.myfaces.view.facelets.tag.jstl.core.SetHandler.apply(FaceletContext, UIComponent)CORRECTNESSRCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE101Medium

org.apache.myfaces.view.facelets.tag.jstl.fn.JstlFunction

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE59Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE379Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE394Low

org.apache.myfaces.view.facelets.tag.ui.CompositionHandler

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.ui.CompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.CompositionHandler._handlersSTYLECI_CONFUSED_INHERITANCENot availableLow
Class org.apache.myfaces.view.facelets.tag.ui.CompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.CompositionHandler._paramsSTYLECI_CONFUSED_INHERITANCENot availableLow
Class org.apache.myfaces.view.facelets.tag.ui.CompositionHandler is final but declares protected field org.apache.myfaces.view.facelets.tag.ui.CompositionHandler._templateSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener defines non-transient non-serializable instance field _currentPhaseBAD_PRACTICESE_BAD_FIELDNot availableLow
Class org.apache.myfaces.view.facelets.tag.ui.DebugPhaseListener defines non-transient non-serializable instance field _visitCallbackBAD_PRACTICESE_BAD_FIELDNot availableLow

org.apache.myfaces.view.facelets.tag.ui.InsertHandler

BugCategoryDetailsLinePriority
Comparison of String parameter using == or != in org.apache.myfaces.view.facelets.tag.ui.InsertHandler.apply(FaceletContext, UIComponent, String) BAD_PRACTICEES_COMPARING_PARAMETER_STRING_WITH_EQ109Low

org.apache.myfaces.view.facelets.tag.ui.RepeatHandler$TagMetaData

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in new org.apache.myfaces.view.facelets.tag.ui.RepeatHandler$TagMetaData(RepeatHandler, Class)STYLEREC_CATCH_EXCEPTION90Low

org.apache.myfaces.view.facelets.tag.ui.UIDebug

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE239Low

org.apache.myfaces.view.facelets.tag.ui.UIDebug$1

BugCategoryDetailsLinePriority
The class org.apache.myfaces.view.facelets.tag.ui.UIDebug$1 could be refactored into a named _static_ inner classPERFORMANCESIC_INNER_SHOULD_BE_STATIC_ANON84-92Low

org.apache.myfaces.view.facelets.util.Classpath

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.util.Classpath._searchDir(Set, File, String) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS125-159High
org.apache.myfaces.view.facelets.util.Classpath._searchFromURL(Set, String, String, URL) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS178-243High
org.apache.myfaces.view.facelets.util.Classpath._searchJar(ClassLoader, Set, JarFile, String, String) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS336-356High
org.apache.myfaces.view.facelets.util.Classpath._searchResource(Set, ClassLoader, String, String, String) is or uses a map or set of URLs, which can be a performance hogPERFORMANCEDMI_COLLECTION_OF_URLS79-121High
Exception is caught when Exception is not thrown in org.apache.myfaces.view.facelets.util.Classpath._searchFromURL(Set, String, String, URL)STYLEREC_CATCH_EXCEPTION218Medium

org.apache.myfaces.view.facelets.util.ReflectionUtil

BugCategoryDetailsLinePriority
org.apache.myfaces.view.facelets.util.ReflectionUtil.PRIMITIVES should be package protectedMALICIOUS_CODEMS_PKGPROTECT34Medium
org.apache.myfaces.view.facelets.util.ReflectionUtil.PRIMITIVE_NAMES should be package protectedMALICIOUS_CODEMS_PKGPROTECT31Medium
Should org.apache.myfaces.view.facelets.util.ReflectionUtil.toTypeArray(String[]) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS101Low
Should org.apache.myfaces.view.facelets.util.ReflectionUtil.toTypeNameArray(Class[]) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS123Low

org.apache.myfaces.view.facelets.util.Resource

BugCategoryDetailsLinePriority
Class org.apache.myfaces.view.facelets.util.Resource is final but declares protected field org.apache.myfaces.view.facelets.util.Resource.logSTYLECI_CONFUSED_INHERITANCENot availableLow

org.apache.myfaces.view.jsp.JspViewDeclarationLanguage

BugCategoryDetailsLinePriority
org.apache.myfaces.view.jsp.JspViewDeclarationLanguage.FACELETS_ONLY_F_TAGS should be package protectedMALICIOUS_CODEMS_PKGPROTECT61Medium
org.apache.myfaces.view.jsp.JspViewDeclarationLanguage.FACELETS_ONLY_H_TAGS should be package protectedMALICIOUS_CODEMS_PKGPROTECT62Medium

org.apache.myfaces.webapp.AbstractFacesInitializer

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE177Low
org.apache.myfaces.webapp.AbstractFacesInitializer.destroyFaces(ServletContext) invokes reflect.Method.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED330Low
Exception is caught when Exception is not thrown in org.apache.myfaces.webapp.AbstractFacesInitializer.initFaces(ServletContext)STYLEREC_CATCH_EXCEPTION202Low

org.apache.myfaces.webapp.Jsp20FacesInitializer$ErrorExpressionFactory

BugCategoryDetailsLinePriority
Should org.apache.myfaces.webapp.Jsp20FacesInitializer$ErrorExpressionFactory be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC137-165Medium

org.apache.myfaces.webapp.MyFacesServlet

BugCategoryDetailsLinePriority
org.apache.myfaces.webapp.MyFacesServlet._facesInitializer is a mutable servlet fieldMT_CORRECTNESSMSF_MUTABLE_SERVLET_FIELD55Low