FindBugs Bug Detector Report
The following document contains the results of FindBugs Report
FindBugs Version is 1.3.9
Threshold is low
Effort is min
Files
org.apache.myfaces.component.html.ext.AbstractHtmlDataTable
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Primitive boxed just to call toString in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.expandAllDetails() | PERFORMANCE | DM_BOXED_PRIMITIVE_TOSTRING | 1703 | Low |
| Comparison of String objects using == or != in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.getRowStyle() | BAD_PRACTICE | ES_COMPARING_STRINGS_WITH_EQ | 1447 | Low |
| Comparison of String objects using == or != in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.getRowStyleClass() | BAD_PRACTICE | ES_COMPARING_STRINGS_WITH_EQ | 1418 | Low |
| Switch statement found in org.apache.myfaces.component.html.ext.AbstractHtmlDataTable.process(FacesContext, UIComponent, int) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 590-593 | Low |
org.apache.myfaces.component.html.ext.AbstractHtmlSelectManyCheckbox
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Private method org.apache.myfaces.component.html.ext.AbstractHtmlSelectManyCheckbox.booleanFromObject(Object, boolean) is never called | PERFORMANCE | UPM_UNCALLED_PRIVATE_METHOD | 101-110 | Low |
org.apache.myfaces.component.html.ext.BaseSortableModel$IntList
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.BaseSortableModel$IntList is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 244-252 | Low |
org.apache.myfaces.component.html.ext.BaseSortableModel$RowDataComparator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.BaseSortableModel$RowDataComparator implements Comparator but not Serializable | BAD_PRACTICE | SE_COMPARATOR_SHOULD_BE_SERIALIZABLE | 257-274 | Low |
org.apache.myfaces.component.html.ext.HtmlDataTableHack
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Private method org.apache.myfaces.component.html.ext.HtmlDataTableHack.booleanFromObject(Object, boolean) is never called | PERFORMANCE | UPM_UNCALLED_PRIVATE_METHOD | 656-665 | Low |
org.apache.myfaces.component.html.ext.HtmlDataTableHack$EditableValueHolderState
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.component.html.ext.HtmlDataTableHack$EditableValueHolderState be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 591-604 | Medium |
org.apache.myfaces.component.html.ext.HtmlInputSecret
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlInputSecret.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlInputSecret.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlInputText
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlInputText.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 125 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlInputText.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 119 | Medium |
org.apache.myfaces.component.html.ext.HtmlInputTextarea
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlInputTextarea.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 101 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlInputTextarea.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 95 | Medium |
org.apache.myfaces.component.html.ext.HtmlPanelGrid
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlPanelGrid.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 70 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlPanelGrid.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 64 | Medium |
org.apache.myfaces.component.html.ext.HtmlPanelGroup
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlPanelGroup.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 413 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlPanelGroup.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 407 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectBooleanCheckbox
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectBooleanCheckbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectBooleanCheckbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectManyCheckbox
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectManyCheckbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 101 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectManyCheckbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 95 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectManyListbox
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectManyListbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectManyListbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectManyMenu
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectManyMenu.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectManyMenu.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectOneListbox
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectOneListbox.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectOneListbox.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectOneMenu
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectOneMenu.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectOneMenu.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.HtmlSelectOneRadio
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.HtmlSelectOneRadio.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 72 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.component.html.ext.HtmlSelectOneRadio.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.component.html.ext.SortCriterion
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.SortCriterion is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 31-75 | Low |
org.apache.myfaces.component.html.ext.SortableModel$Comp
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.component.html.ext.SortableModel$Comp be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 162-217 | Medium |
org.apache.myfaces.component.html.ext.SortableModel$Inverter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.component.html.ext.SortableModel$Inverter implements Comparator but not Serializable | BAD_PRACTICE | SE_COMPARATOR_SHOULD_BE_SERIALIZABLE | 228-234 | Low |
org.apache.myfaces.component.html.ext._SerializableDataModel
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Class org.apache.myfaces.component.html.ext._SerializableDataModel defines non-transient non-serializable instance field _list | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
| The field org.apache.myfaces.component.html.ext._SerializableDataModel._rowIndex is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Medium |
org.apache.myfaces.component.html.util.MultipartFilter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.component.html.util.MultipartFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 122 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 83 | Low |
| Load of known null value in org.apache.myfaces.component.html.util.MultipartFilter.init(FilterConfig) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 69 | Medium |
org.apache.myfaces.component.html.util.StreamingAddResource
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to manager in org.apache.myfaces.component.html.util.StreamingAddResource.addStyleSheet(FacesContext, StreamingAddResource$StreamablePositionedInfo) | STYLE | DLS_DEAD_LOCAL_STORE | 603 | Medium |
| Unread field: org.apache.myfaces.component.html.util.StreamingAddResource.REQUEST_ID_COUNTER | PERFORMANCE | URF_UNREAD_FIELD | 135 | Low |
org.apache.myfaces.custom.buffer.BufferRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.buffer.Buffer in org.apache.myfaces.custom.buffer.BufferRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 64 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.custom.buffer.BufferRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | REC_CATCH_EXCEPTION | 76 | Low |
org.apache.myfaces.custom.calendar.HtmlCalendarRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.calendar.HtmlInputCalendar in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 117 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.calendar.AbstractHtmlInputCalendar in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 1202 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIInput to org.apache.myfaces.custom.calendar.HtmlInputCalendar in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.writeLink(String, UIInput, FacesContext, Date) | STYLE | BC_UNCONFIRMED_CAST | 945 | Low |
| Redundant nullcheck of textValue, which is known to be non-null in org.apache.myfaces.custom.calendar.HtmlCalendarRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 134 | Low |
org.apache.myfaces.custom.calendar.HtmlCalendarRenderer$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The class org.apache.myfaces.custom.calendar.HtmlCalendarRenderer$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 346-353 | Low |
org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent.COMPONENT_FAMILY isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 36 | Low |
| org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent.COMPONENT_TYPE isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 35 | Low |
| org.apache.myfaces.custom.captcha.AbstractCAPTCHAComponent.DEFAULT_RENDERER_TYPE isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 37 | Low |
org.apache.myfaces.custom.captcha.CAPTCHARenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.captcha.CAPTCHAComponent in org.apache.myfaces.custom.captcha.CAPTCHARenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 69 | Low |
org.apache.myfaces.custom.captcha.util.CAPTCHAImageGenerator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| integral division result cast to double or float in org.apache.myfaces.custom.captcha.util.CAPTCHAImageGenerator.getDelta(int, double, double, double) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 237 | Medium |
org.apache.myfaces.custom.captcha.util.CAPTCHATextGenerator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.custom.captcha.util.CAPTCHATextGenerator.generateRandomText() concatenates strings using + in a loop | PERFORMANCE | SBSC_USE_STRINGBUFFER_CONCATENATION | 62 | Medium |
org.apache.myfaces.custom.captcha.util.ColorGenerator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.custom.captcha.util.ColorGenerator.generateRandomColor(Color) uses the nextDouble method of Random to generate a random integer; using nextInt is more efficient | PERFORMANCE | DM_NEXTINT_VIA_NEXTDOUBLE | 45 | Medium |
org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanelRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanel in org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanelRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 131 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanel in org.apache.myfaces.custom.collapsiblepanel.HtmlCollapsiblePanelRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 62 | Low |
org.apache.myfaces.custom.collapsiblepanel.HtmlHeaderLinkTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.collapsiblepanel.HtmlHeaderLinkTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 59 | Medium |
| Dead store to context in org.apache.myfaces.custom.collapsiblepanel.HtmlHeaderLinkTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 63 | Medium |
org.apache.myfaces.custom.crosstable.UIColumns
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in org.apache.myfaces.custom.crosstable.UIColumns.process(FacesContext, UIComponent, int) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 484-487 | Low |
org.apache.myfaces.custom.crosstable.UIColumns$EditableValueHolderState
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.custom.crosstable.UIColumns$EditableValueHolderState be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 527-539 | Medium |
org.apache.myfaces.custom.datalist.AbstractHtmlDataList
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in org.apache.myfaces.custom.datalist.AbstractHtmlDataList.process(FacesContext, UIComponent, int) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 169-172 | Low |
org.apache.myfaces.custom.datalist.HtmlListRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.custom.datalist.HtmlListRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 119 | Low |
org.apache.myfaces.custom.datascroller.AbstractHtmlDataScroller
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of uiData, which is known to be non-null in org.apache.myfaces.custom.datascroller.AbstractHtmlDataScroller.broadcast(FacesEvent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 256 | Low |
org.apache.myfaces.custom.datascroller.HtmlDataScroller
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.datascroller.HtmlDataScroller.getDisplayValueOnly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 973 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.datascroller.HtmlDataScroller.getDisplayValueOnly() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 967 | Medium |
org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.datascroller.HtmlDataScroller in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 186 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.datascroller.HtmlDataScroller in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 199 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.datascroller.HtmlDataScroller in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 219 | Low |
| Redundant nullcheck of org.apache.myfaces.custom.datascroller.AbstractHtmlDataScroller.getUIData(), which is known to be non-null in org.apache.myfaces.custom.datascroller.HtmlDataScrollerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 221 | Low |
org.apache.myfaces.custom.date.AbstractHtmlInputDate$UserData
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Potentially dangerous use of non-short-circuit logic in org.apache.myfaces.custom.date.AbstractHtmlInputDate$UserData.parse() | STYLE | NS_DANGEROUS_NON_SHORT_CIRCUIT | 202 | High |
org.apache.myfaces.custom.date.HtmlDateRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.date.HtmlInputDate in org.apache.myfaces.custom.date.HtmlDateRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 389 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.date.HtmlInputDate in org.apache.myfaces.custom.date.HtmlDateRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 91 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.date.HtmlInputDate in org.apache.myfaces.custom.date.HtmlDateRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 494 | Low |
org.apache.myfaces.custom.date.HtmlDateRenderer$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The class org.apache.myfaces.custom.date.HtmlDateRenderer$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 373-380 | Low |
org.apache.myfaces.custom.div.DivRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.div.Div in org.apache.myfaces.custom.div.DivRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 56 | Low |
org.apache.myfaces.custom.document.AbstractDocumentRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.document.AbstractDocument in org.apache.myfaces.custom.document.AbstractDocumentRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 47 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.document.AbstractDocument in org.apache.myfaces.custom.document.AbstractDocumentRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 77 | Low |
org.apache.myfaces.custom.document.AbstractDocumentTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to context in org.apache.myfaces.custom.document.AbstractDocumentTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 69 | Medium |
org.apache.myfaces.custom.document.DocumentHeadTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.document.DocumentHeadTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
| Dead store to context in org.apache.myfaces.custom.document.DocumentHeadTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.document.DocumentTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.document.DocumentTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
| Dead store to context in org.apache.myfaces.custom.document.DocumentTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.dojo.DojoConfig
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.dojo.DojoConfig.ATTR_DOJO_TYPE isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 54 | Low |
org.apache.myfaces.custom.dojo.DojoInitializerRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.dojo.DojoInitializer in org.apache.myfaces.custom.dojo.DojoInitializerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 75 | Low |
org.apache.myfaces.custom.dojo.DojoUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.dojo.DojoUtils.addDebugConsole(FacesContext, UIComponent) invokes inefficient Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 185 | Medium |
| org.apache.myfaces.custom.dojo.DojoUtils.getExpanded(FacesContext) invokes inefficient Boolean constructor; use Boolean.valueOf(...) instead | PERFORMANCE | DM_BOOLEAN_CTOR | 422 | Medium |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 118 | Low |
| Redundant nullcheck of m, which is known to be non-null in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 131 | Medium |
| Redundant nullcheck of m, which is known to be non-null in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 127 | Low |
| Redundant nullcheck of m, which is known to be non-null in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 136 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.custom.dojo.DojoUtils.getAttributeMap(FacesContext, String[], UIComponent) | STYLE | REC_CATCH_EXCEPTION | 142 | Low |
org.apache.myfaces.custom.emailvalidator.ValidateEmailTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to facesContext in org.apache.myfaces.custom.emailvalidator.ValidateEmailTag.createValidator() | STYLE | DLS_DEAD_LOCAL_STORE | 45 | Medium |
org.apache.myfaces.custom.equalvalidator.AbstractEqualValidator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of foreignValue, which is known to be non-null in org.apache.myfaces.custom.equalvalidator.AbstractEqualValidator.validate(FacesContext, UIComponent, Object) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 128 | Medium |
org.apache.myfaces.custom.equalvalidator.ValidateEqualTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.equalvalidator.ValidateEqualTag.createValidator() invokes inefficient new String(String) constructor | PERFORMANCE | DM_STRING_CTOR | 60 | Medium |
org.apache.myfaces.custom.fieldset.FieldsetRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.fieldset.Fieldset in org.apache.myfaces.custom.fieldset.FieldsetRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 53 | Low |
org.apache.myfaces.custom.fileupload.HtmlFileUploadRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.fileupload.HtmlInputFileUpload in org.apache.myfaces.custom.fileupload.HtmlFileUploadRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 72 | Low |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl.getBytes() ignores result of java.io.InputStream.read(byte[]) | BAD_PRACTICE | RR_NOT_CHECKED | 91 | Medium |
| The field org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl.fileItem is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Low |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl$DefaultDiskStorageStrategy
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.fileupload.UploadedFileDefaultFileImpl$DefaultDiskStorageStrategy is serializable and an inner class | BAD_PRACTICE | SE_INNER_CLASS | 54-80 | Medium |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl.getBytes() may expose internal representation by returning UploadedFileDefaultMemoryImpl.bytes | MALICIOUS_CODE | EI_EXPOSE_REP | 78 | Medium |
| new org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl(FileItem) ignores result of java.io.InputStream.read(byte[]) | BAD_PRACTICE | RR_NOT_CHECKED | 47 | Medium |
| The field org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl.fileItem is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Low |
org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl$DefaultMemoryStorageStrategy
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.fileupload.UploadedFileDefaultMemoryImpl$DefaultMemoryStorageStrategy is serializable and an inner class | BAD_PRACTICE | SE_INNER_CLASS | 51-68 | Medium |
org.apache.myfaces.custom.htmlTag.HtmlTagRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.htmlTag.HtmlTag in org.apache.myfaces.custom.htmlTag.HtmlTagRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 51 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.htmlTag.HtmlTag in org.apache.myfaces.custom.htmlTag.HtmlTagRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 77 | Low |
org.apache.myfaces.custom.inputHtml.InputHtml
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 389 | Low |
org.apache.myfaces.custom.inputHtml.InputHtmlRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.inputHtml.InputHtml in org.apache.myfaces.custom.inputHtml.InputHtmlRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 1803 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.inputHtml.InputHtml in org.apache.myfaces.custom.inputHtml.InputHtmlRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 88 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.inputHtml.InputHtml in org.apache.myfaces.custom.inputHtml.InputHtmlRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 1822 | Low |
org.apache.myfaces.custom.jslistener.JsValueChangeListenerRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.jslistener.JsValueChangeListener in org.apache.myfaces.custom.jslistener.JsValueChangeListenerRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 55 | Low |
org.apache.myfaces.custom.jsvalueset.HtmlJsValueSetRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.jsvalueset.HtmlJsValueSet in org.apache.myfaces.custom.jsvalueset.HtmlJsValueSetRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 122 | Low |
org.apache.myfaces.custom.layout.HtmlLayoutRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.layout.HtmlPanelLayout in org.apache.myfaces.custom.layout.HtmlLayoutRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 69 | Low |
org.apache.myfaces.custom.navigation.AbstractHtmlCommandNavigation
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| instanceof will always return true in org.apache.myfaces.custom.navigation.AbstractHtmlCommandNavigation.toggleOpen(), since all org.apache.myfaces.custom.navigation.HtmlPanelNavigation are instances of org.apache.myfaces.custom.navigation.HtmlPanelNavigation | STYLE | BC_VACUOUS_INSTANCEOF | 164 | Medium |
org.apache.myfaces.custom.navigation.HtmlCommandNavigationTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.navigation.HtmlCommandNavigationTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 59 | Medium |
| Dead store to context in org.apache.myfaces.custom.navigation.HtmlCommandNavigationTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 63 | Medium |
org.apache.myfaces.custom.navigation.HtmlNavigationRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navigation.HtmlPanelNavigation in org.apache.myfaces.custom.navigation.HtmlNavigationRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 100 | Low |
org.apache.myfaces.custom.navmenu.HtmlNavigationMenuItemsTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.navmenu.HtmlNavigationMenuItemsTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
| Dead store to context in org.apache.myfaces.custom.navmenu.HtmlNavigationMenuItemsTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.navmenu.NavigationMenuItem
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Class org.apache.myfaces.custom.navmenu.NavigationMenuItem defines non-transient non-serializable instance field _navigationMenuItems | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.custom.navmenu.NavigationMenuUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Nullcheck of child at line 111 of value previously dereferenced in org.apache.myfaces.custom.navmenu.NavigationMenuUtils.getNavigationMenuItemList(UIComponent) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 111 | High |
org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| instanceof will always return true in org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.getParentPanelNavigation(), since all org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu are instances of org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu | STYLE | BC_VACUOUS_INSTANCEOF | 179 | Medium |
| instanceof will always return true in org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.toggleOpen(), since all org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu are instances of org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu | STYLE | BC_VACUOUS_INSTANCEOF | 222 | Medium |
| org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.getActiveDirectly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 105 | Medium |
| org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlCommandNavigationItem.getOpenDirectly() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 98 | Medium |
org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlPanelNavigationMenu
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of prevItem, which is known to be non-null in org.apache.myfaces.custom.navmenu.htmlnavmenu.AbstractHtmlPanelNavigationMenu.restoreOpenActiveStates(FacesContext, UIViewRoot, List) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 118 | Medium |
org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlNavigationMenuRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlPanelNavigationMenu in org.apache.myfaces.custom.navmenu.htmlnavmenu.HtmlNavigationMenuRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 101 | Low |
org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.jscookmenu.HtmlCommandJSCookMenu in org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 109 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.jscookmenu.HtmlCommandJSCookMenu in org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 361 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.navmenu.jscookmenu.HtmlCommandJSCookMenu in org.apache.myfaces.custom.navmenu.jscookmenu.HtmlJSCookMenuRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 373 | Low |
org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.newspaper.HtmlNewspaperTable in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 59 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.newspaper.HtmlNewspaperTable in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 74 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.newspaper.HtmlNewspaperTable in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 161 | Low |
| instanceof will always return true in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getFooterClass(HtmlNewspaperTable), since all org.apache.myfaces.custom.newspaper.HtmlNewspaperTable are instances of javax.faces.component.html.HtmlDataTable | STYLE | BC_VACUOUS_INSTANCEOF | 336 | Medium |
| instanceof will always return true in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getHeaderClass(HtmlNewspaperTable), since all org.apache.myfaces.custom.newspaper.HtmlNewspaperTable are instances of javax.faces.component.html.HtmlDataTable | STYLE | BC_VACUOUS_INSTANCEOF | 326 | Medium |
| instanceof will always return true in org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getStyles(HtmlNewspaperTable), since all org.apache.myfaces.custom.newspaper.HtmlNewspaperTable are instances of javax.faces.component.html.HtmlDataTable | STYLE | BC_VACUOUS_INSTANCEOF | 349 | Medium |
| Method org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getFooterClass(HtmlNewspaperTable) does an unnecessary type check using instanceof operator when it can be determined statically | CORRECTNESS | SIO_SUPERFLUOUS_INSTANCEOF | 336 | Low |
| Method org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getHeaderClass(HtmlNewspaperTable) does an unnecessary type check using instanceof operator when it can be determined statically | CORRECTNESS | SIO_SUPERFLUOUS_INSTANCEOF | 326 | Low |
| Method org.apache.myfaces.custom.newspaper.HtmlNewspaperTableRenderer.getStyles(HtmlNewspaperTable) does an unnecessary type check using instanceof operator when it can be determined statically | CORRECTNESS | SIO_SUPERFLUOUS_INSTANCEOF | 349 | Low |
org.apache.myfaces.custom.panelstack.HtmlPanelStackRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.panelstack.HtmlPanelStack in org.apache.myfaces.custom.panelstack.HtmlPanelStackRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 62 | Low |
org.apache.myfaces.custom.picklist.HtmlPicklistRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.custom.picklist.HtmlPicklistRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 168 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.picklist.HtmlSelectManyPicklist in org.apache.myfaces.custom.picklist.HtmlPicklistRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 131 | Low |
org.apache.myfaces.custom.popup.HtmlPopup
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingElement() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 178 | Medium |
| org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingPopup() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 203 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingElement() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 172 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getClosePopupOnExitingPopup() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 197 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getDisplayAtDistanceX() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 122 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.popup.HtmlPopup.getDisplayAtDistanceY() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 147 | Medium |
org.apache.myfaces.custom.popup.HtmlPopupRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.popup.HtmlPopup in org.apache.myfaces.custom.popup.HtmlPopupRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 75 | Low |
| org.apache.myfaces.custom.popup.HtmlPopupRenderer.encodeEnd(FacesContext, UIComponent) invokes inefficient new String(String) constructor | PERFORMANCE | DM_STRING_CTOR | 131 | Medium |
org.apache.myfaces.custom.regexprvalidator.ValidateRegExprTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to facesContext in org.apache.myfaces.custom.regexprvalidator.ValidateRegExprTag.createValidator() | STYLE | DLS_DEAD_LOCAL_STORE | 52 | Medium |
org.apache.myfaces.custom.savestate.SaveStateTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.savestate.SaveStateTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
| Dead store to context in org.apache.myfaces.custom.savestate.SaveStateTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.schedule.AbstractScheduleRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.AbstractScheduleRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 73 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.AbstractScheduleRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 152 | Low |
org.apache.myfaces.custom.schedule.ScheduleCompactMonthRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleCompactMonthRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 71 | Low |
org.apache.myfaces.custom.schedule.ScheduleCompactWeekRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleCompactWeekRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 68 | Low |
org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 82 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.schedule.HtmlSchedule in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 116 | Low |
| integral division result cast to double or float in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.writeBackgroundStart(FacesContext, HtmlSchedule, ResponseWriter) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 422 | Medium |
| integral division result cast to double or float in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.writeEntries(FacesContext, HtmlSchedule, ScheduleDay, ResponseWriter) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 654 | Medium |
| integral division result cast to double or float in org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.writeForegroundStart(FacesContext, HtmlSchedule, ResponseWriter) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 764 | Medium |
| Unread field: org.apache.myfaces.custom.schedule.ScheduleDetailedDayRenderer.defaultRowHeightInPixels; should this field be static? | PERFORMANCE | SS_SHOULD_BE_STATIC | 64 | Medium |
org.apache.myfaces.custom.schedule.UISchedule
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.schedule.UISchedule.getLastClickedDateAndTime() may expose internal representation by returning UISchedule._lastClickedDateAndTime | MALICIOUS_CODE | EI_EXPOSE_REP | 209 | Medium |
| Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _scheduleListener | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
| Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _action | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
| Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _actionListener | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
| Class org.apache.myfaces.custom.schedule.UISchedule defines non-transient non-serializable instance field _mouseListener | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
org.apache.myfaces.custom.schedule.UISchedule$ScheduleActionListener
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.custom.schedule.UISchedule$ScheduleActionListener be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 51-65 | Medium |
org.apache.myfaces.custom.schedule.UIScheduleBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Class org.apache.myfaces.custom.schedule.UIScheduleBase defines non-transient non-serializable instance field _converter | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
org.apache.myfaces.custom.schedule.model.AbstractScheduleModel
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.custom.schedule.model.AbstractScheduleModel.getDays() uses the same code for two switch clauses | STYLE | DB_DUPLICATE_SWITCH_CLAUSES | 89-91 | Low |
| org.apache.myfaces.custom.schedule.model.AbstractScheduleModel.getSelectedDate() may expose internal representation by returning AbstractScheduleModel.selectedDate | MALICIOUS_CODE | EI_EXPOSE_REP | 168 | Medium |
| org.apache.myfaces.custom.schedule.model.AbstractScheduleModel.setSelectedDate(Date) may expose internal representation by storing an externally mutable object into AbstractScheduleModel.selectedDate | MALICIOUS_CODE | EI_EXPOSE_REP2 | 159 | Medium |
org.apache.myfaces.custom.schedule.model.Day
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.schedule.model.Day.getDate() may expose internal representation by returning Day.date | MALICIOUS_CODE | EI_EXPOSE_REP | 111 | Medium |
| org.apache.myfaces.custom.schedule.model.Day.getDayEnd() may expose internal representation by returning Day.dayEnd | MALICIOUS_CODE | EI_EXPOSE_REP | 119 | Medium |
| org.apache.myfaces.custom.schedule.model.Day.getDayStart() may expose internal representation by returning Day.dayStart | MALICIOUS_CODE | EI_EXPOSE_REP | 127 | Medium |
| new org.apache.myfaces.custom.schedule.model.Day(Date, TimeZone) may expose internal representation by storing an externally mutable object into Day.date | MALICIOUS_CODE | EI_EXPOSE_REP2 | 83 | Medium |
org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.getEndTime() may expose internal representation by returning DefaultScheduleEntry.endTime | MALICIOUS_CODE | EI_EXPOSE_REP | 116 | Medium |
| org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.getStartTime() may expose internal representation by returning DefaultScheduleEntry.startTime | MALICIOUS_CODE | EI_EXPOSE_REP | 152 | Medium |
| org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.setEndTime(Date) may expose internal representation by storing an externally mutable object into DefaultScheduleEntry.endTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 97 | Medium |
| org.apache.myfaces.custom.schedule.model.DefaultScheduleEntry.setStartTime(Date) may expose internal representation by storing an externally mutable object into DefaultScheduleEntry.startTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 140 | Medium |
org.apache.myfaces.custom.schedule.model.HalfHourInterval
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.schedule.model.HalfHourInterval is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 41-71 | Low |
org.apache.myfaces.custom.schedule.model.Interval
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.schedule.model.Interval.getEndTime() may expose internal representation by returning Interval.endTime | MALICIOUS_CODE | EI_EXPOSE_REP | 72 | Medium |
| org.apache.myfaces.custom.schedule.model.Interval.getStartTime() may expose internal representation by returning Interval.startTime | MALICIOUS_CODE | EI_EXPOSE_REP | 63 | Medium |
| new org.apache.myfaces.custom.schedule.model.Interval(String, Date, Date) may expose internal representation by storing an externally mutable object into Interval.endTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 49 | Medium |
| new org.apache.myfaces.custom.schedule.model.Interval(String, Date, Date) may expose internal representation by storing an externally mutable object into Interval.startTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 48 | Medium |
| org.apache.myfaces.custom.schedule.model.Interval.setEndTime(Date) may expose internal representation by storing an externally mutable object into Interval.endTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 76 | Medium |
| org.apache.myfaces.custom.schedule.model.Interval.setStartTime(Date) may expose internal representation by storing an externally mutable object into Interval.startTime | MALICIOUS_CODE | EI_EXPOSE_REP2 | 67 | Medium |
| org.apache.myfaces.custom.schedule.model.Interval is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 46-158 | Low |
org.apache.myfaces.custom.schedule.model.ScheduleDay
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.schedule.model.ScheduleDay doesn't override Day.equals(Object) | STYLE | EQ_DOESNT_OVERRIDE_EQUALS | 65-357 | Medium |
org.apache.myfaces.custom.selectOneCountry.AbstractSelectOneCountry
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 82 | Low |
| Method org.apache.myfaces.custom.selectOneCountry.AbstractSelectOneCountry.getCountriesChoicesAsSelectItemList() makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 126 | Medium |
org.apache.myfaces.custom.selectOneCountry.SelectOneCountry
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.selectOneCountry.SelectOneCountry.getMaxLength() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.custom.selectOneCountry.SelectOneCountryRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.selectOneCountry.SelectOneCountry in org.apache.myfaces.custom.selectOneCountry.SelectOneCountryRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 52 | Low |
org.apache.myfaces.custom.selectOneLanguage.AbstractSelectOneLanguage
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 86 | Low |
| Method org.apache.myfaces.custom.selectOneLanguage.AbstractSelectOneLanguage.getLanguagesChoicesAsSelectItemList() makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 130 | Medium |
org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguage
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguage.getMaxLength() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 66 | Medium |
org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguageRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguage in org.apache.myfaces.custom.selectOneLanguage.SelectOneLanguageRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 52 | Low |
org.apache.myfaces.custom.selectitems.AbstractUISelectItems
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.custom.selectitems.AbstractUISelectItems.createSelectItems(Object) uses Collection.toArray() with zero-length array argument | PERFORMANCE | ITA_INEFFICIENT_TO_ARRAY | 145 | Low |
org.apache.myfaces.custom.sortheader.HtmlSortHeaderRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.sortheader.HtmlCommandSortHeader in org.apache.myfaces.custom.sortheader.HtmlSortHeaderRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 70 | Low |
org.apache.myfaces.custom.stylesheet.StylesheetRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.stylesheet.Stylesheet in org.apache.myfaces.custom.stylesheet.StylesheetRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 52 | Low |
org.apache.myfaces.custom.stylesheet.TextResourceFilter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.custom.stylesheet.TextResourceFilter.getOrCreateFilteredResource(FacesContext, String) invokes toString() method on a String | PERFORMANCE | DM_STRING_TOSTRING | 196 | Low |
| Class org.apache.myfaces.custom.stylesheet.TextResourceFilter defines non-transient non-serializable instance field filteredResources | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
| org.apache.myfaces.custom.stylesheet.TextResourceFilter is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 61-233 | Medium |
org.apache.myfaces.custom.subform.SubForm
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.subform.SubForm.getPreserveSubmittedValues() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 71 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.subform.SubForm.getPreserveSubmittedValues() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 65 | Medium |
org.apache.myfaces.custom.subform.SubFormRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.subform.SubForm in org.apache.myfaces.custom.subform.SubFormRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 80 | Low |
org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane.getActivePanelTabVar() has Boolean return type and returns explicit null | BAD_PRACTICE | NP_BOOLEAN_RETURN_NULL | 82 | Medium |
| Redundant nullcheck of vb, which is known to be non-null in org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane.getActivePanelTabVar() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 76 | Medium |
org.apache.myfaces.custom.tabbedpane.HtmlTabbedPaneRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane in org.apache.myfaces.custom.tabbedpane.HtmlTabbedPaneRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 258 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tabbedpane.HtmlPanelTabbedPane in org.apache.myfaces.custom.tabbedpane.HtmlTabbedPaneRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 94 | Low |
org.apache.myfaces.custom.tabbedpane.TabChangeEvent
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.event.FacesListener to org.apache.myfaces.custom.tabbedpane.TabChangeListener in org.apache.myfaces.custom.tabbedpane.TabChangeEvent.processListener(FacesListener) | STYLE | BC_UNCONFIRMED_CAST | 63 | Low |
org.apache.myfaces.custom.toggle.ToggleGroupRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.ToggleGroup in org.apache.myfaces.custom.toggle.ToggleGroupRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 43 | Low |
| Dead store to toggleGroup in org.apache.myfaces.custom.toggle.ToggleGroupRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 43 | Medium |
org.apache.myfaces.custom.toggle.ToggleLinkRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.ToggleLink in org.apache.myfaces.custom.toggle.ToggleLinkRenderer.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 147 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.ToggleLink in org.apache.myfaces.custom.toggle.ToggleLinkRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 137 | Low |
org.apache.myfaces.custom.toggle.TogglePanelRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.toggle.TogglePanel in org.apache.myfaces.custom.toggle.TogglePanelRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 54 | Low |
org.apache.myfaces.custom.tree.DefaultMutableTreeNode
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Class org.apache.myfaces.custom.tree.DefaultMutableTreeNode defines non-transient non-serializable instance field children | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
| org.apache.myfaces.custom.tree.DefaultMutableTreeNode is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 36-214 | Low |
org.apache.myfaces.custom.tree.HtmlTree$Event
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in org.apache.myfaces.custom.tree.HtmlTree$Event.process(HtmlTree) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 1066-1069 | Low |
org.apache.myfaces.custom.tree.HtmlTree$ModelListener
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.tree.HtmlTree$ModelListener is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 980-1033 | Low |
org.apache.myfaces.custom.tree.HtmlTreeNode
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.tree.HtmlTreeNode.getLayout() may expose internal representation by returning HtmlTreeNode.layout | MALICIOUS_CODE | EI_EXPOSE_REP | 438 | Medium |
| org.apache.myfaces.custom.tree.HtmlTreeNode.setLayout(int[]) may expose internal representation by storing an externally mutable object into HtmlTreeNode.layout | MALICIOUS_CODE | EI_EXPOSE_REP2 | 444 | Medium |
org.apache.myfaces.custom.tree.event.TreeSelectionEvent
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.event.FacesListener to org.apache.myfaces.custom.tree.event.TreeSelectionListener in org.apache.myfaces.custom.tree.event.TreeSelectionEvent.processListener(FacesListener) | STYLE | BC_UNCONFIRMED_CAST | 86 | Low |
org.apache.myfaces.custom.tree.model.DefaultTreeModel
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.custom.tree.model.DefaultTreeModel.getPathToRoot(TreeNode, int) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 265 | Low |
| org.apache.myfaces.custom.tree.model.DefaultTreeModel is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 40-403 | Low |
org.apache.myfaces.custom.tree.model.TreeModelEvent
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new org.apache.myfaces.custom.tree.model.TreeModelEvent(Object, TreePath, int[], Object[]) may expose internal representation by storing an externally mutable object into TreeModelEvent.childIndices | MALICIOUS_CODE | EI_EXPOSE_REP2 | 71 | Medium |
| new org.apache.myfaces.custom.tree.model.TreeModelEvent(Object, TreePath, int[], Object[]) may expose internal representation by storing an externally mutable object into TreeModelEvent.children | MALICIOUS_CODE | EI_EXPOSE_REP2 | 72 | Medium |
| Should org.apache.myfaces.custom.tree.model.TreeModelEvent.getChildIndices() return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 177 | Low |
| Should org.apache.myfaces.custom.tree.model.TreeModelEvent.getChildren() return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 155 | Low |
org.apache.myfaces.custom.tree.model.TreePath
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new org.apache.myfaces.custom.tree.model.TreePath(Object[]) may expose internal representation by storing an externally mutable object into TreePath.elements | MALICIOUS_CODE | EI_EXPOSE_REP2 | 48 | Medium |
org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeCheckboxRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree.HtmlTreeCheckbox in org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeCheckboxRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 51 | Low |
org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeNodeRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree.HtmlTreeNode in org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeNodeRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 51 | Low |
org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree.HtmlTree in org.apache.myfaces.custom.tree.renderkit.html.HtmlTreeRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 95 | Low |
org.apache.myfaces.custom.tree.taglib.TreeColumnTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.custom.tree.taglib.TreeColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
| Dead store to context in org.apache.myfaces.custom.tree.taglib.TreeColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.custom.tree2.HtmlTreeRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree2.HtmlTree in org.apache.myfaces.custom.tree2.HtmlTreeRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 131 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to org.apache.myfaces.custom.tree2.HtmlTree in org.apache.myfaces.custom.tree2.HtmlTreeRenderer.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 176 | Low |
| Method org.apache.myfaces.custom.tree2.HtmlTreeRenderer.restoreStateFromCookies(FacesContext, UIComponent) makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 105 | Medium |
org.apache.myfaces.custom.tree2.ToggleExpandedEvent
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.tree2.ToggleExpandedEvent is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 40-66 | Low |
org.apache.myfaces.custom.tree2.TreeNodeBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.custom.tree2.TreeNodeBase defines compareTo(Object) and uses Object.equals() | BAD_PRACTICE | EQ_COMPARETO_USE_OBJECT_EQUALS | 103-118 | Medium |
| Class org.apache.myfaces.custom.tree2.TreeNodeBase defines non-transient non-serializable instance field children | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.custom.tree2.TreeWalkerBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| TreeWalkerBase.tree not initialized in constructor | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available | Low |
org.apache.myfaces.custom.tree2.UITreeData
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in org.apache.myfaces.custom.tree2.UITreeData.processNodes(FacesContext, int, TreeWalker) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 556-559 | Low |
org.apache.myfaces.custom.updateactionlistener.UpdateActionListenerTagHandler
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.ActionSource in org.apache.myfaces.custom.updateactionlistener.UpdateActionListenerTagHandler.apply(FaceletContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 83 | Low |
org.apache.myfaces.dateformat.DateFormatSymbols
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unread field: org.apache.myfaces.dateformat.DateFormatSymbols.eras | PERFORMANCE | URF_UNREAD_FIELD | 41 | Medium |
| Unread field: org.apache.myfaces.dateformat.DateFormatSymbols.zoneStrings | PERFORMANCE | URF_UNREAD_FIELD | 67 | Medium |
org.apache.myfaces.dateformat.ParserContext
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unread field: org.apache.myfaces.dateformat.ParserContext.ambiguousWeekYear | PERFORMANCE | URF_UNREAD_FIELD | 581 | Medium |
org.apache.myfaces.dateformat.SimpleDateFormatter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| integral division result cast to double or float in org.apache.myfaces.dateformat.SimpleDateFormatter.getIsoWeekDate(Date) | STYLE | ICAST_IDIV_CAST_TO_DOUBLE | 172 | Medium |
org.apache.myfaces.generated.taglib.html.ext.HtmlInputHiddenTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to context in org.apache.myfaces.generated.taglib.html.ext.HtmlInputHiddenTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 78 | Medium |
org.apache.myfaces.generated.taglib.html.ext.HtmlSelectBooleanCheckboxTag
| Bug | Category | Details | Line | Priority |
|---|
org.apache.myfaces.generated.taglib.html.ext.HtmlSelectManyCheckboxTag
| Bug | Category | Details | Line | Priority |
|---|
org.apache.myfaces.renderkit.html.ext.HtmlCheckboxRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.renderkit.html.ext.HtmlCheckboxRenderer.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean) | STYLE | BC_UNCONFIRMED_CAST | 259 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlHiddenRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.renderkit.html.ext.HtmlHiddenRenderer.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 77 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlSecretRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIInput in org.apache.myfaces.renderkit.html.ext.HtmlSecretRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 65 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIData to org.apache.myfaces.component.html.ext.HtmlDataTable in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.beforeBody(FacesContext, UIData) | STYLE | BC_UNCONFIRMED_CAST | 307 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIData to org.apache.myfaces.component.html.ext.HtmlDataTable in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.renderColumnBody(FacesContext, ResponseWriter, UIData, UIComponent, HtmlTableRendererBase$Styles, int) | STYLE | BC_UNCONFIRMED_CAST | 664 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIData to org.apache.myfaces.component.html.ext.HtmlDataTable in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.renderRowStart(FacesContext, ResponseWriter, UIData, HtmlTableRendererBase$Styles, int) | STYLE | BC_UNCONFIRMED_CAST | 531 | Low |
| Primitive boxed just to call toString in org.apache.myfaces.renderkit.html.ext.HtmlTableRenderer.renderColumnBody(FacesContext, ResponseWriter, UIData, UIComponent, HtmlTableRendererBase$Styles, int) | PERFORMANCE | DM_BOXED_PRIMITIVE_TOSTRING | 704 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlTextRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIInput in org.apache.myfaces.renderkit.html.ext.HtmlTextRenderer.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 209 | Low |
org.apache.myfaces.renderkit.html.ext.HtmlTextareaRenderer
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIInput in org.apache.myfaces.renderkit.html.ext.HtmlTextareaRenderer.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 64 | Low |
org.apache.myfaces.renderkit.html.util.DefaultAddResource
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Field DefaultAddResource.log masks field in superclass org.apache.myfaces.renderkit.html.util.NonBufferingAddResource | CORRECTNESS | MF_CLASS_MASKS_FIELD | 79-824 | High |
| org.apache.myfaces.renderkit.html.util.DefaultAddResource.writeResponse(HttpServletRequest, HttpServletResponse) may fail to close stream | BAD_PRACTICE | OS_OPEN_STREAM | 488 | Medium |
org.apache.myfaces.renderkit.html.util.ExtensionsPhaseListener
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception is caught when Exception is not thrown in org.apache.myfaces.renderkit.html.util.ExtensionsPhaseListener.writeCodeBeforeBodyEnd(FacesContext) | STYLE | REC_CATCH_EXCEPTION | 186 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Can't close content since it is always null in org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.loadResourceFile(FacesContext, String) | CORRECTNESS | NP_CLOSING_NULL | 912 | High |
| Possible null pointer dereference of content in org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils.loadResourceFile(FacesContext, String) | CORRECTNESS | NP_NULL_ON_SOME_PATH | 931 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.shared_tomahawk.renderkit.RendererUtils$1 defines equals and uses Object.hashCode() | BAD_PRACTICE | HE_EQUALS_USE_HASHCODE | 58-65 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HTML
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 222 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 137 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 88 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONSELECT_AND_ONCHANGE is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 103 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 148 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_STYLE is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 152 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 78 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 270 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 274 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 284 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 416 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 296 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 301 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 361 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_TABLE_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 436 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 387 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 444 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES is a mutable array | MALICIOUS_CODE | MS_MUTABLE_ARRAY | 124 | High |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 199 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 212 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 217 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 317 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 325 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 329 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONFOCUS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 96 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 164 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 179 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 174 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 156 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 160 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 184 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 55 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 67 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 233 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 242 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.IMG_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 257 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.INPUT_FILE_UPLOAD_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 412 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 340 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.MESSAGE_PASSTHROUGH_ATTRIBUTES_WITHOUT_TITLE_STYLE_AND_STYLE_CLASS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 429 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.SELECT_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 355 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TABLE_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 373 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 396 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 406 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UL_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 440 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 116 | Medium |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 142 | Low |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 169 | Low |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protected | MALICIOUS_CODE | MS_OOI_PKGPROTECT | 347 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean) | STYLE | BC_UNCONFIRMED_CAST | 177 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.decode(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 222 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlFormRendererBase.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 98 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlListboxRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| instanceof will always return true in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlListboxRendererBase.encodeEnd(FacesContext, UIComponent), since all javax.faces.component.html.HtmlSelectOneListbox are instances of javax.faces.component.html.HtmlSelectOneListbox | STYLE | BC_VACUOUS_INSTANCEOF | 68 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 59 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 300 | Low |
| Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean) | STYLE | BC_UNCONFIRMED_CAST | 165 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.findUIOutputConverterFailSafe(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 376 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.findUISelectManyConverterFailsafe(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 362 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter) | STYLE | BC_UNCONFIRMED_CAST | 335 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter) | STYLE | BC_UNCONFIRMED_CAST | 342 | Low |
| org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.DEFAULT_CHAR_ENCODING isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 1346 | Low |
| Method call in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlRendererUtils.renderDisplayValueOnlyForSelects(FacesContext, UIComponent) passes null for nonnull parameter of renderSelectOptionsAsText(FacesContext, UIComponent, Converter, Set, List, boolean) | CORRECTNESS | NP_NULL_PARAM_DEREF | 668 | Medium |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlResponseWriterImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 117 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 189 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 263 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 359 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlSecretRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 106 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeBegin(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 105 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeChildren(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 133 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeEnd(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 647 | Low |
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.encodeInnerHtml(FacesContext, UIComponent) | STYLE | BC_UNCONFIRMED_CAST | 216 | Low |
| Redundant nullcheck of elemName, which is known to be non-null in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTableRendererBase.renderFacet(FacesContext, ResponseWriter, UIComponent, boolean) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 731 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 191 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared_tomahawk.renderkit.html.HtmlTextareaRendererBase.getConvertedValue(FacesContext, UIComponent, Object) | STYLE | BC_UNCONFIRMED_CAST | 92 | Low |
org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 149 | Low |
| Switch statement found in org.apache.myfaces.shared_tomahawk.renderkit.html.util.JavascriptUtils.encodeString(String) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 206-208 | Low |
org.apache.myfaces.shared_tomahawk.taglib.html.HtmlColumnTag
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to comp in org.apache.myfaces.shared_tomahawk.taglib.html.HtmlColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 58 | Medium |
| Dead store to context in org.apache.myfaces.shared_tomahawk.taglib.html.HtmlColumnTag.setProperties(UIComponent) | STYLE | DLS_DEAD_LOCAL_STORE | 62 | Medium |
org.apache.myfaces.shared_tomahawk.test.ClassElementHandler
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| ClassElementHandler.buffer not initialized in constructor | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available | Low |
org.apache.myfaces.shared_tomahawk.util.ExceptionUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.ExceptionUtils.getExceptions(Throwable) | STYLE | REC_CATCH_EXCEPTION | 59 | Low |
org.apache.myfaces.shared_tomahawk.util.LocaleUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.LocaleUtils.converterTagLocaleFromString(String) | STYLE | REC_CATCH_EXCEPTION | 136 | Low |
org.apache.myfaces.shared_tomahawk.util.MessageUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method call in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessageFromBundle(String, String, Object[]) passes null for nonnull parameter of getMessageFromBundle(String, FacesContext, Locale, String, Object[]) | CORRECTNESS | NP_NULL_PARAM_DEREF | 263 | Medium |
| Redundant comparison of non-null value to null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(String, FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE | 588 | Low |
| Redundant comparison of non-null value to null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_COMPARISON_OF_NULL_AND_NONNULL_VALUE | 568 | Low |
| Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(String, FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 591 | Low |
| Redundant nullcheck of message, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util.MessageUtils.getMessage(FacesContext, String, Object[]) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 571 | Low |
org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage(String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._args | MALICIOUS_CODE | EI_EXPOSE_REP2 | 54 | Medium |
| new org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage(FacesMessage$Severity, String, String, Object[], Locale) may expose internal representation by storing an externally mutable object into ParametrizableFacesMessage._args | MALICIOUS_CODE | EI_EXPOSE_REP2 | 63 | Medium |
| The field org.apache.myfaces.shared_tomahawk.util.ParametrizableFacesMessage._evaluatedArgs is transient but isn't set by deserialization | BAD_PRACTICE | SE_TRANSIENT_FIELD_NOT_RESTORED | Not available | Low |
org.apache.myfaces.shared_tomahawk.util.StateUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| instanceof will always return true in org.apache.myfaces.shared_tomahawk.util.StateUtils.getMacSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKey | STYLE | BC_VACUOUS_INSTANCEOF | 936 | Medium |
| instanceof will always return true in org.apache.myfaces.shared_tomahawk.util.StateUtils.getSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKey | STYLE | BC_VACUOUS_INSTANCEOF | 791 | Medium |
| Dead store of null to baos in org.apache.myfaces.shared_tomahawk.util.StateUtils.compress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 346 | Low |
| Dead store of null to gzip in org.apache.myfaces.shared_tomahawk.util.StateUtils.compress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 345 | Low |
| Dead store of null to bais in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 417 | Low |
| Dead store of null to baos in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 416 | Low |
| Dead store of null to gis in org.apache.myfaces.shared_tomahawk.util.StateUtils.decompress(byte[]) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 418 | Low |
| Dead store of null to outputStream in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsByteArray(Object, ExternalContext) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 274 | Low |
| Dead store of null to writer in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsByteArray(Object, ExternalContext) | STYLE | DLS_DEAD_LOCAL_STORE_OF_NULL | 273 | Low |
| Random object created and used only once in org.apache.myfaces.shared_tomahawk.util.StateUtils.findMacSecret(String, String) | BAD_PRACTICE | DMI_RANDOM_USED_ONLY_ONCE | 986 | High |
| Random object created and used only once in org.apache.myfaces.shared_tomahawk.util.StateUtils.findSecret(String, String) | BAD_PRACTICE | DMI_RANDOM_USED_ONLY_ONCE | 841 | High |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 667 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 679 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 645 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 630 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 861 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 874 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 950 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 962 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 805 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 817 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 907 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 762 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 724 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 189 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.decrypt(byte[], ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 490 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.encrypt(byte[], ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 328 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.StateUtils.getAsObject(byte[], ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 552 | Low |
org.apache.myfaces.shared_tomahawk.util.StringUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.shared_tomahawk.util.StringUtils.trim(String[]) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 685 | Low |
org.apache.myfaces.shared_tomahawk.util._Constants
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of ret, which is known to be non-null in org.apache.myfaces.shared_tomahawk.util._Constants.getStringResource(String) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 185 | Low |
org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet.doGet(HttpServletRequest, HttpServletResponse) | STYLE | REC_CATCH_EXCEPTION | 87 | Low |
| org.apache.myfaces.shared_tomahawk.util.servlet.SourceCodeServlet is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 26-121 | Low |
org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception is caught when Exception is not thrown in org.apache.myfaces.shared_tomahawk.webapp.webxml.WebXmlParser.parse() | STYLE | REC_CATCH_EXCEPTION | 112 | Low |
org.apache.myfaces.tomahawk.util.ExternalContextUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception is caught when Exception is not thrown in org.apache.myfaces.tomahawk.util.ExternalContextUtils.getContentLength(ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 73 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.tomahawk.util.ExternalContextUtils.getRequestInputStream(ExternalContext) | STYLE | REC_CATCH_EXCEPTION | 103 | Low |
org.apache.myfaces.validator.AttachedListStateWrapper
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Class org.apache.myfaces.validator.AttachedListStateWrapper defines non-transient non-serializable instance field _wrappedStateList | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.webapp.filter.ExtensionsFilter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 299 | Low |
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 254 | Low |
| Load of known null value in org.apache.myfaces.webapp.filter.ExtensionsFilter.init(FilterConfig) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 236 | Medium |
org.apache.myfaces.webapp.filter.ExtensionsResponseWrapper$MyServletOutputStream
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.webapp.filter.ExtensionsResponseWrapper$MyServletOutputStream be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 128-142 | Medium |
org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 54 | Low |
| Unchecked/unconfirmed cast from javax.servlet.ServletResponse to javax.servlet.http.HttpServletResponse in org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 55 | Low |
| HTTP parameter directly written to HTTP header output in org.apache.myfaces.webapp.filter.JavaScriptDetectorFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | SECURITY | HRS_REQUEST_PARAMETER_TO_HTTP_HEADER | 59 | Medium |
org.apache.myfaces.webapp.filter.MultipartRequestWrapper
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Should org.apache.myfaces.webapp.filter.MultipartRequestWrapper.getParameterValues(String) return a zero length array rather than null? | STYLE | PZLA_PREFER_ZERO_LENGTH_ARRAYS | 305 | Low |
org.apache.myfaces.webapp.filter.MultipartRequestWrapperConfig
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase | I18N | DM_CONVERT_CASE | 57 | Low |
| Load of known null value in org.apache.myfaces.webapp.filter.MultipartRequestWrapperConfig.getMultipartRequestWrapperConfig(ExternalContext) | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 173 | Medium |
org.apache.myfaces.webapp.filter.TomahawkFacesContextWrapper
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to oldResponse in org.apache.myfaces.webapp.filter.TomahawkFacesContextWrapper.release() | STYLE | DLS_DEAD_LOCAL_STORE | 348 | Medium |
org.apache.myfaces.webapp.filter.WelcomeFileFilter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unchecked/unconfirmed cast from javax.servlet.ServletRequest to javax.servlet.http.HttpServletRequest in org.apache.myfaces.webapp.filter.WelcomeFileFilter.doFilter(ServletRequest, ServletResponse, FilterChain) | STYLE | BC_UNCONFIRMED_CAST | 100 | Low |
| Exception is caught when Exception is not thrown in org.apache.myfaces.webapp.filter.WelcomeFileFilter.init(FilterConfig) | STYLE | REC_CATCH_EXCEPTION | 209 | Low |
org.apache.myfaces.webapp.filter.WelcomeFileHandler
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.myfaces.webapp.filter.WelcomeFileHandler.getWelcomeFiles() may expose internal representation by returning WelcomeFileHandler.files | MALICIOUS_CODE | EI_EXPOSE_REP | 63 | Medium |
| WelcomeFileHandler.welcomeFiles not initialized in constructor | STYLE | UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR | Not available | Low |
org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Nullcheck of fileItem at line 205 of value previously dereferenced in org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload.parseRequestCatchingFileSizeErrors(ActionRequest, FileUpload) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 205 | Medium |
org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The class org.apache.myfaces.webapp.filter.portlet.PortletChacheFileSizeErrorsFileUpload$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 176-180 | Low |
org.apache.myfaces.webapp.filter.portlet.PortletExternalContextWrapper$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The class org.apache.myfaces.webapp.filter.portlet.PortletExternalContextWrapper$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 201-211 | Low |
org.apache.myfaces.webapp.filter.portlet.SessionMap
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.webapp.filter.portlet.SessionMap.getAttribute(String) invokes toString() method on a String | PERFORMANCE | DM_STRING_TOSTRING | 54 | Low |
org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Nullcheck of fileItem at line 204 of value previously dereferenced in org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload.parseRequestCatchingFileSizeErrors(HttpServletRequest, FileUpload) | CORRECTNESS | RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE | 204 | Medium |
org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The class org.apache.myfaces.webapp.filter.servlet.ServletChacheFileSizeErrorsFileUpload$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 175-179 | Low |
org.apache.myfaces.webapp.filter.servlet.ServletExternalContextWrapper$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The class org.apache.myfaces.webapp.filter.servlet.ServletExternalContextWrapper$1 could be refactored into a named _static_ inner class | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC_ANON | 220-230 | Low |
org.apache.myfaces.webapp.filter.servlet.SessionMap
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Method org.apache.myfaces.webapp.filter.servlet.SessionMap.getAttribute(String) invokes toString() method on a String | PERFORMANCE | DM_STRING_TOSTRING | 54 | Low |