Apache MyFaces
Documentation
Foundation

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is low

Effort is min

Summary

ClassesBugsErrorsMissing Classes
14214001

Files

ClassBugs
org.apache.myfaces.shared.renderkit.RendererUtils4
org.apache.myfaces.shared.renderkit.RendererUtils$11
org.apache.myfaces.shared.renderkit.html.HTML49
org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase3
org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase3
org.apache.myfaces.shared.renderkit.html.HtmlGroupRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlLinkRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase5
org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils7
org.apache.myfaces.shared.renderkit.html.HtmlResponseWriterImpl4
org.apache.myfaces.shared.renderkit.html.HtmlSecretRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase8
org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlTextareaRendererBase1
org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder2
org.apache.myfaces.shared.renderkit.html.util.JavascriptUtils2
org.apache.myfaces.shared.taglib.UIComponentBodyELTagBase1
org.apache.myfaces.shared.test.ClassElementHandler1
org.apache.myfaces.shared.trace.TracingIterator1
org.apache.myfaces.shared.util.ClassUtils2
org.apache.myfaces.shared.util.ExceptionUtils1
org.apache.myfaces.shared.util.LocaleUtils1
org.apache.myfaces.shared.util.MessageUtils5
org.apache.myfaces.shared.util.ParametrizableFacesMessage3
org.apache.myfaces.shared.util.StateUtils28
org.apache.myfaces.shared.util.StringUtils1
org.apache.myfaces.shared.util.servlet.SourceCodeServlet1
org.apache.myfaces.shared.webapp.webxml.WebXmlParser1

org.apache.myfaces.shared.renderkit.RendererUtils

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.shared.renderkit.RendererUtils.getConvertedUISelectOneValue(FacesContext, UISelectOne, Object), since all String are instances of StringSTYLEBC_VACUOUS_INSTANCEOF735Medium
Method org.apache.myfaces.shared.renderkit.RendererUtils.getViewSequence(FacesContext) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR919Medium
Can't close content since it is always null in org.apache.myfaces.shared.renderkit.RendererUtils.loadResourceFile(FacesContext, String)CORRECTNESSNP_CLOSING_NULL1090High
Possible null pointer dereference of content in org.apache.myfaces.shared.renderkit.RendererUtils.loadResourceFile(FacesContext, String)CORRECTNESSNP_NULL_ON_SOME_PATH1109Medium

org.apache.myfaces.shared.renderkit.RendererUtils$1

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.renderkit.RendererUtils$1 defines equals and uses Object.hashCode()BAD_PRACTICEHE_EQUALS_USE_HASHCODE85-92Medium

org.apache.myfaces.shared.renderkit.html.HTML

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT205Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT218Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT228Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT223Medium
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT323Medium
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT328Medium
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT332Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT138Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT89Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONFOCUS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT97Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONSELECT_AND_ONCHANGE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT104Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT165Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT185Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT180Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT170Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT149Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT157Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT161Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT190Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT153Medium
org.apache.myfaces.shared.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT81Medium
org.apache.myfaces.shared.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT58Medium
org.apache.myfaces.shared.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT70Medium
org.apache.myfaces.shared.renderkit.html.HTML.FORM_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT239Medium
org.apache.myfaces.shared.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT248Medium
org.apache.myfaces.shared.renderkit.html.HTML.IMG_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT263Medium
org.apache.myfaces.shared.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT276Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT290Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_FILE_UPLOAD_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT401Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT298Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT302Medium
org.apache.myfaces.shared.renderkit.html.HTML.LABEL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT343Medium
org.apache.myfaces.shared.renderkit.html.HTML.MESSAGE_PASSTHROUGH_ATTRIBUTES_WITHOUT_TITLE_STYLE_AND_STYLE_CLASS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT418Medium
org.apache.myfaces.shared.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT358Medium
org.apache.myfaces.shared.renderkit.html.HTML.SELECT_TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT425Medium
org.apache.myfaces.shared.renderkit.html.HTML.TABLE_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT368Medium
org.apache.myfaces.shared.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT379Medium
org.apache.myfaces.shared.renderkit.html.HTML.TEXTAREA_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT388Medium
org.apache.myfaces.shared.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT395Medium
org.apache.myfaces.shared.renderkit.html.HTML.UL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT429Medium
org.apache.myfaces.shared.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT125Medium
org.apache.myfaces.shared.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT117Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT143Low
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT175Low
org.apache.myfaces.shared.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT280Low
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT405Low
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT307Low
org.apache.myfaces.shared.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT350Low
org.apache.myfaces.shared.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT433Low

org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase

BugCategoryDetailsLinePriority
Dead store to nestingForm in org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase.buildOnClick(UIComponent, FacesContext, ResponseWriter)STYLEDLS_DEAD_LOCAL_STORE197Medium

org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean, Integer)STYLEBC_UNCONFIRMED_CAST176Low
Method org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase.renderCheckboxList(FacesContext, UISelectMany) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR121Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean, Integer) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR181Medium

org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase.decode(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST178Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase.encodeBegin(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST59Low
Private method org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase.getAcceptCharset(UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD222-226Medium

org.apache.myfaces.shared.renderkit.html.HtmlGroupRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.html.HtmlPanelGroup in org.apache.myfaces.shared.renderkit.html.HtmlGroupRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low

org.apache.myfaces.shared.renderkit.html.HtmlLinkRendererBase

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.shared.renderkit.html.HtmlLinkRendererBase.renderLinkParameter(String, Object, StringBuffer, String, UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD532-543Low

org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST55Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST303Low
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean, Integer)STYLEBC_UNCONFIRMED_CAST166Low
Method org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.encodeEnd(FacesContext, UIComponent) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR99Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean, Integer) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR170Medium

org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.findUIOutputConverterFailSafe(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST393Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.findUISelectManyConverterFailsafe(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST380Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter)STYLEBC_UNCONFIRMED_CAST350Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter)STYLEBC_UNCONFIRMED_CAST357Low
public static org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getSupportedContentTypes() may expose internal representation by returning HtmlRendererUtils.SUPPORTED_CONTENT_TYPESMALICIOUS_CODEMS_EXPOSE_REP1695Medium
org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.DEFAULT_CHAR_ENCODING isn't final but should beMALICIOUS_CODEMS_SHOULD_BE_FINAL1606Low
Method call in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.renderDisplayValueOnlyForSelects(FacesContext, UIComponent) passes null for nonnull parameter of renderSelectOptionsAsText(FacesContext, UIComponent, Converter, Set, List, boolean)CORRECTNESSNP_NULL_PARAM_DEREF724Medium

org.apache.myfaces.shared.renderkit.html.HtmlResponseWriterImpl

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE117Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE185Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE259Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE355Low

org.apache.myfaces.shared.renderkit.html.HtmlSecretRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlSecretRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST127Low

org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeBegin(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST109Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeChildren(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST137Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST560Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeInnerHtml(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST231Low
Method org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderColumnFooterCell(FacesContext, ResponseWriter, UIComponent, UIComponent, String, int) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR973Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderColumnHeaderCell(FacesContext, ResponseWriter, UIComponent, UIComponent, String, int) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR919Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderTableHeaderOrFooterRow(FacesContext, ResponseWriter, UIComponent, UIComponent, String, String, int, boolean) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR775Medium
Redundant nullcheck of elemName, which is known to be non-null in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderFacet(FacesContext, ResponseWriter, UIComponent, boolean)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE644Low

org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST219Low

org.apache.myfaces.shared.renderkit.html.HtmlTextareaRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlTextareaRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST94Low

org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder

BugCategoryDetailsLinePriority
Switch statement found in org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder.encode(String, boolean, boolean, boolean) where default case is missingSTYLESF_SWITCH_NO_DEFAULT100-102Low
Switch statement found in org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder.encode(char[], int, int, boolean, boolean, boolean, Writer) where default case is missingSTYLESF_SWITCH_NO_DEFAULT226-228Low

org.apache.myfaces.shared.renderkit.html.util.JavascriptUtils

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE155Low
Switch statement found in org.apache.myfaces.shared.renderkit.html.util.JavascriptUtils.encodeString(String) where default case is missingSTYLESF_SWITCH_NO_DEFAULT212-214Low

org.apache.myfaces.shared.taglib.UIComponentBodyELTagBase

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.shared.taglib.UIComponentBodyELTagBase.setConverterProperty(UIComponent, String) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD209-210Medium

org.apache.myfaces.shared.test.ClassElementHandler

BugCategoryDetailsLinePriority
ClassElementHandler.buffer not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.shared.trace.TracingIterator

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.trace.TracingIterator.next() can't throw NoSuchElementExceptionBAD_PRACTICEIT_NO_SUCH_ELEMENT69Low

org.apache.myfaces.shared.util.ClassUtils

BugCategoryDetailsLinePriority
Dead store to plugins in org.apache.myfaces.shared.util.ClassUtils.classForName(String)STYLEDLS_DEAD_LOCAL_STORE155Medium
org.apache.myfaces.shared.util.ClassUtils.classLoadingExtensions should be package protectedMALICIOUS_CODEMS_PKGPROTECT66Medium

org.apache.myfaces.shared.util.ExceptionUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.ExceptionUtils.getExceptions(Throwable)STYLEREC_CATCH_EXCEPTION59Low

org.apache.myfaces.shared.util.LocaleUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.LocaleUtils.converterTagLocaleFromString(String)STYLEREC_CATCH_EXCEPTION136Low

org.apache.myfaces.shared.util.MessageUtils

BugCategoryDetailsLinePriority
Method call in org.apache.myfaces.shared.util.MessageUtils.getMessageFromBundle(String, String, Object[]) passes null for nonnull parameter of getMessageFromBundle(String, FacesContext, Locale, String, Object[])CORRECTNESSNP_NULL_PARAM_DEREF265Medium
Redundant comparison of non-null value to null in org.apache.myfaces.shared.util.MessageUtils.getMessage(String, FacesContext, String, Object[])STYLERCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE590Low
Redundant comparison of non-null value to null in org.apache.myfaces.shared.util.MessageUtils.getMessage(FacesContext, String, Object[])STYLERCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE570Low
Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared.util.MessageUtils.getMessage(String, FacesContext, String, Object[])STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE593Low
Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared.util.MessageUtils.getMessage(FacesContext, String, Object[])STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE573Low

org.apache.myfaces.shared.util.ParametrizableFacesMessage

BugCategoryDetailsLinePriority
new org.apache.myfaces.shared.util.ParametrizableFacesMessage(String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._argsMALICIOUS_CODEEI_EXPOSE_REP255Medium
new org.apache.myfaces.shared.util.ParametrizableFacesMessage(FacesMessage$Severity, String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._argsMALICIOUS_CODEEI_EXPOSE_REP264Medium
The field org.apache.myfaces.shared.util.ParametrizableFacesMessage._evaluatedArgs is transient but isn't set by deserializationBAD_PRACTICESE_TRANSIENT_FIELD_NOT_RESTOREDNot availableLow

org.apache.myfaces.shared.util.StateUtils

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.shared.util.StateUtils.getMacSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKeySTYLEBC_VACUOUS_INSTANCEOF932Medium
instanceof will always return true in org.apache.myfaces.shared.util.StateUtils.getSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKeySTYLEBC_VACUOUS_INSTANCEOF787Medium
Dead store of null to baos in org.apache.myfaces.shared.util.StateUtils.compress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL348Low
Dead store of null to gzip in org.apache.myfaces.shared.util.StateUtils.compress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL347Low
Dead store of null to bais in org.apache.myfaces.shared.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL419Low
Dead store of null to baos in org.apache.myfaces.shared.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL418Low
Dead store of null to gis in org.apache.myfaces.shared.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL420Low
Dead store of null to outputStream in org.apache.myfaces.shared.util.StateUtils.getAsByteArray(Object, ExternalContext)STYLEDLS_DEAD_LOCAL_STORE_OF_NULL276Low
Dead store of null to writer in org.apache.myfaces.shared.util.StateUtils.getAsByteArray(Object, ExternalContext)STYLEDLS_DEAD_LOCAL_STORE_OF_NULL275Low
Random object created and used only once in org.apache.myfaces.shared.util.StateUtils.findMacSecret(String, String)BAD_PRACTICEDMI_RANDOM_USED_ONLY_ONCE982High
Random object created and used only once in org.apache.myfaces.shared.util.StateUtils.findSecret(String, String)BAD_PRACTICEDMI_RANDOM_USED_ONLY_ONCE837High
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE663Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE675Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE641Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE626Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE857Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE870Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE946Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE958Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE801Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE813Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE903Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE758Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE720Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE191Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StateUtils.decrypt(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION486Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StateUtils.encrypt(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION330Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StateUtils.getAsObject(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION548Low

org.apache.myfaces.shared.util.StringUtils

BugCategoryDetailsLinePriority
Should org.apache.myfaces.shared.util.StringUtils.trim(String[]) return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS685Low

org.apache.myfaces.shared.util.servlet.SourceCodeServlet

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.util.servlet.SourceCodeServlet is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID25-61Low

org.apache.myfaces.shared.webapp.webxml.WebXmlParser

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.webapp.webxml.WebXmlParser.parse()STYLEREC_CATCH_EXCEPTION113Low