SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.5.3
Threshold is medium
Effort is default
Summary
| Classes |
Bugs |
Errors |
Missing Classes |
| 50 |
24 |
0 |
0 |
fr.paris.lutece.plugins.mylutece.modules.database.authentication.business.DatabaseUser
| Bug |
Category |
Details |
Line |
Priority |
| fr.paris.lutece.plugins.mylutece.modules.database.authentication.business.DatabaseUser.getAccountMaxValidDate() may expose internal representation by returning DatabaseUser._accountMaxValidDate |
MALICIOUS_CODE |
EI_EXPOSE_REP |
244 |
Medium |
| fr.paris.lutece.plugins.mylutece.modules.database.authentication.business.DatabaseUser.getPasswordMaxValidDate() may expose internal representation by returning DatabaseUser._passwordMaxValidDate |
MALICIOUS_CODE |
EI_EXPOSE_REP |
234 |
Medium |
| fr.paris.lutece.plugins.mylutece.modules.database.authentication.business.DatabaseUser.setAccountMaxValidDate(Timestamp) may expose internal representation by storing an externally mutable object into DatabaseUser._accountMaxValidDate |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
255 |
Medium |
| fr.paris.lutece.plugins.mylutece.modules.database.authentication.business.DatabaseUser.setPasswordMaxValidDate(Timestamp) may expose internal representation by storing an externally mutable object into DatabaseUser._passwordMaxValidDate |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
224 |
Medium |
fr.paris.lutece.plugins.mylutece.modules.database.authentication.service.DatabaseAccountLifeTimeService
| Bug |
Category |
Details |
Line |
Priority |
| fr.paris.lutece.plugins.mylutece.modules.database.authentication.service.DatabaseAccountLifeTimeService.getPlugin() may expose internal representation by returning DatabaseAccountLifeTimeService._plugin |
MALICIOUS_CODE |
EI_EXPOSE_REP |
95 |
Medium |
fr.paris.lutece.plugins.mylutece.modules.database.authentication.service.DatabaseService
| Bug |
Category |
Details |
Line |
Priority |
| Public static fr.paris.lutece.plugins.mylutece.modules.database.authentication.service.DatabaseService.getService() may expose internal representation by returning DatabaseService._singleton |
MALICIOUS_CODE |
MS_EXPOSE_REP |
217 |
Medium |
fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean
| Bug |
Category |
Details |
Line |
Priority |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean defines non-transient non-serializable instance field _anonymizationService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean defines non-transient non-serializable instance field _databaseService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean defines non-transient non-serializable instance field _duFilter |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean defines non-transient non-serializable instance field _importDatabaseUserService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean defines non-transient non-serializable instance field _userFactory |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean defines non-transient non-serializable instance field _userParamService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Write to static field fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean._plugin from instance method fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean.doRemoveUser(HttpServletRequest) |
STYLE |
ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD |
689 |
Medium |
| Write to static field fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean._plugin from instance method fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.DatabaseJspBean.getManageUsers(HttpServletRequest) |
STYLE |
ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD |
334 |
Medium |
fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.GroupJspBean
| Bug |
Category |
Details |
Line |
Priority |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.GroupJspBean defines non-transient non-serializable instance field _databaseService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.GroupJspBean defines non-transient non-serializable instance field _gFilter |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp
| Bug |
Category |
Details |
Line |
Priority |
| fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp.init(HttpServletRequest, Plugin) may expose internal representation by storing an externally mutable object into MyLuteceDatabaseApp._plugin |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
267 |
Medium |
| Possible null pointer dereference of user in fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp.reactivateAccount(HttpServletRequest) |
CORRECTNESS |
NP_NULL_ON_SOME_PATH |
1677 |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp defines non-transient non-serializable instance field _captchaService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp defines non-transient non-serializable instance field _databaseService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp defines non-transient non-serializable instance field _plugin |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp defines non-transient non-serializable instance field _userFactory |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp defines non-transient non-serializable instance field _userKeyService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Class fr.paris.lutece.plugins.mylutece.modules.database.authentication.web.MyLuteceDatabaseApp defines non-transient non-serializable instance field _userParamService |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
