Project Documentation
The following document contains the results of SpotBugs
SpotBugs Version is 4.8.3
Threshold is low
Effort is max
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 32 | 24 | 0 | 7 |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| com.app.controller.AuthController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 62 | Low |
| com.app.controller.AuthController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 87 | Low |
| com.app.controller.AuthController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 49 | Low |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new com.app.controller.FileController(FileStorageService) may expose internal representation by storing an externally mutable object into FileController.fileStorageService | MALICIOUS_CODE | EI_EXPOSE_REP2 | 27 | Medium |
| com.app.controller.FileController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 54 | Low |
| com.app.controller.FileController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 41 | Low |
| com.app.controller.FileController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 35 | Low |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| com.app.controller.HelloController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 11 | Low |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new com.app.controller.MessageController(MessageService) may expose internal representation by storing an externally mutable object into MessageController.messageService | MALICIOUS_CODE | EI_EXPOSE_REP2 | 19 | Medium |
| com.app.controller.MessageController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 34 | Low |
| com.app.controller.MessageController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 40 | Low |
| com.app.controller.MessageController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 24 | Low |
| com.app.controller.MessageController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 29 | Low |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new com.app.controller.ProductController(ProductService) may expose internal representation by storing an externally mutable object into ProductController.productService | MALICIOUS_CODE | EI_EXPOSE_REP2 | 29 | Medium |
| com.app.controller.ProductController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 34 | Low |
| com.app.controller.ProductController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 64 | Low |
| com.app.controller.ProductController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 40 | Low |
| com.app.controller.ProductController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 54 | Low |
| com.app.controller.ProductController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 49 | Low |
| com.app.controller.ProductController is a Spring endpoint (Controller) | SECURITY | SPRING_ENDPOINT | 59 | Low |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Use of non-localized String.toUpperCase() or String.toLowerCase() in com.app.model.UserRole.toJson() | I18N | DM_CONVERT_CASE | 11 | Low |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| com.app.service.FileStorageService$FileDownloadPayload.mediaType() may expose internal representation by returning FileStorageService$FileDownloadPayload.mediaType | MALICIOUS_CODE | EI_EXPOSE_REP | 15 | Medium |
| new com.app.service.FileStorageService$FileDownloadPayload(String, String, MediaType, Resource) may expose internal representation by storing an externally mutable object into FileStorageService$FileDownloadPayload.mediaType | MALICIOUS_CODE | EI_EXPOSE_REP2 | 15 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class com.app.service.impl.FileStorageServiceImpl at new com.app.service.impl.FileStorageServiceImpl(ProductRepository, ProductFileRepository, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 45 | Medium |