Eclipse Jetty® - Web Container & Clients - supports HTTP/3, HTTP/2, HTTP/1, websocket, servlets, and more
This report summarizes scanner evidence for jetty/jetty.project, a Java project with 4,097 GitHub stars. SynthScan examined 1,725,901 lines of code across 8266 source files, recording 7612 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 9.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 6346 finding(s).
Are imports declared and package/API names verified? 525 finding(s).
Are wrappers, guards, and repeated structures necessary? 761 finding(s).
Which changes need focused human review? 7612 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 7612 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | header-template.txt | 1 | // | COMMENT |
| LOW | …etty/gcloud/session/GCloudSessionDataStoreFactory.java | 1 | // | COMMENT |
| LOW | …lipse/jetty/gcloud/session/GCloudSessionDataStore.java | 1 | // | COMMENT |
| LOW | …ntegrations/jetty-nosql/src/main/java/module-info.java | 1 | // | COMMENT |
| LOW | …ava/org/eclipse/jetty/nosql/NoSqlSessionDataStore.java | 1 | // | COMMENT |
| LOW | …rc/main/java/org/eclipse/jetty/nosql/package-info.java | 1 | // | COMMENT |
| LOW | …/jetty/nosql/mongodb/MongoSessionDataStoreFactory.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/nosql/mongodb/MongoSessionDataStore.java | 1 | // | COMMENT |
| LOW | …n/java/org/eclipse/jetty/nosql/mongodb/MongoUtils.java | 1 | // | COMMENT |
| LOW | …java/org/eclipse/jetty/nosql/mongodb/package-info.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/security/openid/OpenIdRealmNameTest.java | 1 | // | COMMENT |
| LOW | …lipse/jetty/security/openid/OpenIdCredentialsTest.java | 1 | // | COMMENT |
| LOW | …se/jetty/security/openid/OpenIdAuthenticationTest.java | 1 | // | COMMENT |
| LOW | …pse/jetty/security/openid/OpenIdErrorResponseTest.java | 1 | // | COMMENT |
| LOW | …/org/eclipse/jetty/security/openid/JwtDecoderTest.java | 1 | // | COMMENT |
| LOW | …tegrations/jetty-openid/src/main/java/module-info.java | 1 | // | COMMENT |
| LOW | …/security/openid/OpenIdAuthenticatorConfiguration.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/security/openid/OpenIdConfiguration.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/security/openid/OpenIdAuthenticator.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/security/openid/OpenIdUserPrincipal.java | 1 | // | COMMENT |
| LOW | …/jetty/security/openid/OpenIdAuthenticatorFactory.java | 1 | // | COMMENT |
| LOW | …/eclipse/jetty/security/openid/OpenIdLoginService.java | 1 | // | COMMENT |
| LOW | …java/org/eclipse/jetty/security/openid/JwtDecoder.java | 1 | // | COMMENT |
| LOW | …g/eclipse/jetty/security/openid/OpenIdCredentials.java | 1 | // | COMMENT |
| LOW | …pse/jetty/session/infinispan/EmbeddedQueryManager.java | 1 | // | COMMENT |
| LOW | …ty/session/infinispan/EmbeddedQueryManagerFactory.java | 1 | // | COMMENT |
| LOW | …ipse/jetty/session/infinispan/QueryManagerFactory.java | 1 | // | COMMENT |
| LOW | …org/eclipse/jetty/session/infinispan/QueryManager.java | 1 | // | COMMENT |
| LOW | …inispan/InfinispanSerializationContextInitializer.java | 1 | // | COMMENT |
| LOW | …sion/infinispan/InfinispanSessionDataStoreFactory.java | 1 | // | COMMENT |
| LOW | …tty/session/infinispan/BoundDelegatingInputStream.java | 1 | // | COMMENT |
| LOW | …se/jetty/session/infinispan/InfinispanSessionData.java | 1 | // | COMMENT |
| LOW | …/jetty/session/infinispan/NullQueryManagerFactory.java | 1 | // | COMMENT |
| LOW | …pse/jetty/session/infinispan/InfinispanKeyBuilder.java | 1 | // | COMMENT |
| LOW | …tty/session/infinispan/InfinispanSessionDataStore.java | 1 | // | COMMENT |
| LOW | …ssion/infinispan/InfinispanSessionLegacyConverter.java | 1 | // | COMMENT |
| LOW | …se/jetty/session/infinispan/SessionDataMarshaller.java | 1 | // | COMMENT |
| LOW | …etty/session/infinispan/RemoteQueryManagerFactory.java | 1 | // | COMMENT |
| LOW | …lipse/jetty/session/infinispan/RemoteQueryManager.java | 1 | // | COMMENT |
| LOW | …rations/jetty-hazelcast/src/main/java/module-info.java | 1 | // | COMMENT |
| LOW | …pse/jetty/hazelcast/session/SessionDataSerializer.java | 1 | // | COMMENT |
| LOW | …jetty/hazelcast/session/HazelcastSessionDataStore.java | 1 | // | COMMENT |
| LOW | …azelcast/session/HazelcastSessionDataStoreFactory.java | 1 | // | COMMENT |
| LOW | …pse/jetty/security/siwe/SignatureVerificationTest.java | 1 | // | COMMENT |
| LOW | …clipse/jetty/security/siwe/SignInWithEthereumTest.java | 1 | // | COMMENT |
| LOW | …/jetty/security/siwe/SignInWithEthereumParserTest.java | 1 | // | COMMENT |
| LOW | …e/jetty/security/siwe/SignInWithEthereumTokenTest.java | 1 | // | COMMENT |
| LOW | …ipse/jetty/security/siwe/util/EthereumCredentials.java | 1 | // | COMMENT |
| LOW | …ty/security/siwe/util/SignInWithEthereumGenerator.java | 1 | // | COMMENT |
| LOW | …grations/jetty-ethereum/src/main/java/module-info.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/security/siwe/EthereumAuthenticator.java | 1 | // | COMMENT |
| LOW | …/jetty/security/siwe/EthereumAuthenticatorFactory.java | 1 | // | COMMENT |
| LOW | …eclipse/jetty/security/siwe/internal/EthereumUtil.java | 1 | // | COMMENT |
| LOW | …ty/security/siwe/internal/SignInWithEthereumToken.java | 1 | // | COMMENT |
| LOW | …etty-memcached-sessions/src/main/java/module-info.java | 1 | // | COMMENT |
| LOW | …/memcached/session/MemcachedSessionDataMapFactory.java | 1 | // | COMMENT |
| LOW | …e/jetty/memcached/session/MemcachedSessionDataMap.java | 1 | // | COMMENT |
| LOW | …e/jetty/servlet6/embedded/ManyServletContextsTest.java | 1 | // | COMMENT |
| LOW | …y/servlet6/embedded/OneServletContextJmxStatsTest.java | 1 | // | COMMENT |
| LOW | …ipse/jetty/servlet6/embedded/AbstractEmbeddedTest.java | 1 | // | COMMENT |
| 6260 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | VERSION.txt | 301 | + 12818 NPE with websocket java.lang.NullPointerException: Cannot invoke "org.eclipse.jetty.io.RetainableByteBuffer.has | CODE |
| CRITICAL | VERSION.txt | 406 | + 12577 org.eclipse.jetty.http.HttpURI.getDecodedPath() throws an NPE when | CODE |
| CRITICAL | VERSION.txt | 457 | "org.eclipse.jetty.io.RetainableByteBuffer.getByteBuffer()" because "buffer" | CODE |
| CRITICAL | VERSION.txt | 588 | + 12818 NPE with websocket java.lang.NullPointerException: Cannot invoke "org.eclipse.jetty.io.RetainableByteBuffer.has | CODE |
| CRITICAL | VERSION.txt | 607 | "org.eclipse.jetty.io.RetainableByteBuffer.hasRemaining()" because | CODE |
| CRITICAL | VERSION.txt | 732 | "org.eclipse.jetty.io.RetainableByteBuffer.getByteBuffer()" because "buffer" | CODE |
| CRITICAL | VERSION.txt | 758 | + 12577 org.eclipse.jetty.http.HttpURI.getDecodedPath() throws an NPE when | CODE |
| CRITICAL | VERSION.txt | 818 | + 12279 org.eclipse.jetty.maven.ServerSupport.configureHandlers(Server | CODE |
| CRITICAL | VERSION.txt | 970 | + 11507 org.eclipse.jetty.util.Attributes.getAttribute() should specify return | CODE |
| CRITICAL | VERSION.txt | 1440 | + 9947 Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()" | CODE |
| CRITICAL | VERSION.txt | 1491 | + 9947 Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()" | CODE |
| CRITICAL | VERSION.txt | 1576 | + 9947 Cannot invoke "org.eclipse.jetty.io.ManagedSelector.getTotalKeys()" | CODE |
| CRITICAL | VERSION.txt | 1801 | + 8584 org.eclipse.jetty.client.HttpRequest.send() never returns | CODE |
| CRITICAL | VERSION.txt | 1855 | + 8584 org.eclipse.jetty.client.HttpRequest.send() never returns | CODE |
| CRITICAL | VERSION.txt | 1917 | + 8584 org.eclipse.jetty.client.HttpRequest.send() never returns | CODE |
| CRITICAL | VERSION.txt | 1960 | + 8584 org.eclipse.jetty.client.HttpRequest.send() never returns | CODE |
| CRITICAL | VERSION.txt | 2003 | + 8584 org.eclipse.jetty.client.HttpRequest.send() never returns | CODE |
| CRITICAL | VERSION.txt | 4599 | org.eclipse.jetty.util.ajax.JSON.toString() | CODE |
| CRITICAL | VERSION.txt | 6242 | + 472601 org.eclipse.jetty.util.log.Log.setLog() does not work as before | CODE |
| CRITICAL | VERSION.txt | 6747 | + 458849 org.eclipse.jetty.util.Uptime.DefaultImpl() not available on GAE | CODE |
| CRITICAL | VERSION.txt | 6831 | + 458849 org.eclipse.jetty.util.Uptime.DefaultImpl() not available on GAE | CODE |
| CRITICAL | VERSION.txt | 7471 | org.eclipse.jetty.osgi.annotations.AnnotationConfiguration.BundleParserTask.getStatistic() | CODE |
| CRITICAL | VERSION.txt | 8322 | + 404283 org.eclipse.jetty.util.Scanner.scanFile() dies with an NPE if | CODE |
| CRITICAL | VERSION.txt | 8350 | + 404283 org.eclipse.jetty.util.Scanner.scanFile() dies with an NPE if | CODE |
| CRITICAL | VERSION.txt | 8476 | + 404283 org.eclipse.jetty.util.Scanner.scanFile() dies with an NPE if | CODE |
| CRITICAL | VERSION.txt | 11083 | + JETTY-814 Add org.eclipse.jetty.client.Address.toString() | CODE |
| CRITICAL | VERSION.txt | 11205 | + JETTY-814 Add org.eclipse.jetty.client.Address.toString() | CODE |
| CRITICAL | …jetty/docs/programming/server/session/SessionDocs.java | 328 | infinispanSessionDataStore.setQueryManager(new org.eclipse.jetty.session.infinispan.EmbeddedQueryManager(loc | CODE |
| CRITICAL | …jetty/docs/programming/server/session/SessionDocs.java | 363 | configurationBuilder.addContextInitializer(new org.eclipse.jetty.session.infinispan.InfinispanSerializationC | CODE |
| CRITICAL | …jetty/docs/programming/server/session/SessionDocs.java | 372 | infinispanSessionDataStore.setQueryManager(new org.eclipse.jetty.session.infinispan.RemoteQueryManager(remot | CODE |
| CRITICAL | …a/org/eclipse/jetty/util/resource/ResourceFactory.java | 895 | org.eclipse.jetty.util.component.LifeCycle.start(factory); | CODE |
| CRITICAL | …a/org/eclipse/jetty/util/resource/ResourceFactory.java | 956 | container.addEventListener(new org.eclipse.jetty.util.component.LifeCycle.Listener() | CODE |
| CRITICAL | …java/org/eclipse/jetty/fcgi/server/HttpClientTest.java | 236 | Fields fields = org.eclipse.jetty.server.Request.extractQueryParameters(request); | STRING |
| CRITICAL | …java/org/eclipse/jetty/fcgi/server/HttpClientTest.java | 268 | Fields fields = org.eclipse.jetty.server.Request.extractQueryParameters(request); | STRING |
| CRITICAL | …java/org/eclipse/jetty/fcgi/server/HttpClientTest.java | 305 | Fields fields = org.eclipse.jetty.server.Request.extractQueryParameters(request); | STRING |
| CRITICAL | …java/org/eclipse/jetty/fcgi/server/HttpClientTest.java | 336 | Fields fields = org.eclipse.jetty.server.Request.extractQueryParameters(request); | STRING |
| CRITICAL | …java/org/eclipse/jetty/fcgi/server/HttpClientTest.java | 368 | Fields fields = org.eclipse.jetty.server.Request.extractQueryParameters(request); | STRING |
| CRITICAL | …java/org/eclipse/jetty/fcgi/server/HttpClientTest.java | 401 | Fields fields = org.eclipse.jetty.server.Request.extractQueryParameters(request); | STRING |
| CRITICAL | …gi/src/main/java/org/eclipse/jetty/osgi/util/Util.java | 248 | ServiceReference ref = bundleContext.getServiceReference(org.osgi.service.packageadmin.PackageAdmin.class.getNam | CODE |
| CRITICAL | …se/jetty/websocket/tests/server/DirectUpgradeTest.java | 270 | org.eclipse.jetty.websocket.api.Callback.Completable.with(c -> session.sendBinary(payload, c)) | CODE |
| CRITICAL | …se/jetty/websocket/tests/server/DirectUpgradeTest.java | 278 | session.sendText(message, org.eclipse.jetty.websocket.api.Callback.from(session::demand, Throwable::printSta | CODE |
| CRITICAL | …et/server/internal/DelegatedServerUpgradeResponse.java | 67 | .map(apiExt -> org.eclipse.jetty.websocket.core.ExtensionConfig.parse(apiExt.getParameterizedName())) | CODE |
| CRITICAL | …websocket/server/internal/CompletedUpgradeRequest.java | 92 | cookies.add(org.eclipse.jetty.http.HttpCookie.asJavaNetHttpCookie(cookie)); | CODE |
| CRITICAL | …pse/jetty/websocket/common/OutgoingMessageCapture.java | 132 | messageSink.accept(copy, org.eclipse.jetty.util.Callback.from(() -> {}, Throwable::printStackTrace)); | CODE |
| CRITICAL | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 69 | org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail), | CODE |
| CRITICAL | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 98 | var cb = org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail); | CODE |
| CRITICAL | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 110 | var cb = org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail); | CODE |
| CRITICAL | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 138 | var cb = org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail); | CODE |
| CRITICAL⚡ | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 150 | org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail), false); | CODE |
| CRITICAL⚡ | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 157 | org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail), false); | CODE |
| CRITICAL⚡ | …g/eclipse/jetty/websocket/common/WebSocketSession.java | 163 | coreSession.close(statusCode, reason, org.eclipse.jetty.util.Callback.from(callback::succeed, callback::fail)); | CODE |
| CRITICAL | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 206 | org.eclipse.jetty.websocket.api.Callback.from(coreCallback::succeeded, coreCallback::failed)); | CODE |
| CRITICAL | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 281 | var apiCallback = org.eclipse.jetty.websocket.api.Callback.from(callback::succeeded, callback::failed); | CODE |
| CRITICAL | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 318 | getSession().sendPong(frame.getPayload(), new org.eclipse.jetty.websocket.api.Callback() | CODE |
| CRITICAL⚡ | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 425 | return new org.eclipse.jetty.websocket.api.exceptions.MessageTooLargeException(cause.getMessage(), cause); | CODE |
| CRITICAL⚡ | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 428 | return new org.eclipse.jetty.websocket.api.exceptions.ProtocolException(cause.getMessage(), cause); | CODE |
| CRITICAL⚡ | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 431 | return new org.eclipse.jetty.websocket.api.exceptions.BadPayloadException(cause.getMessage(), cause); | CODE |
| CRITICAL⚡ | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 434 | return new org.eclipse.jetty.websocket.api.exceptions.CloseException(((CloseException)cause).getStatusCode() | CODE |
| CRITICAL⚡ | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 437 | return new org.eclipse.jetty.websocket.api.exceptions.WebSocketTimeoutException(cause.getMessage(), cause); | CODE |
| CRITICAL⚡ | …jetty/websocket/common/JettyWebSocketFrameHandler.java | 440 | return new org.eclipse.jetty.websocket.api.exceptions.InvalidWebSocketException(cause.getMessage(), cause); | CODE |
| 419 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …tty/security/PersistAuthenticationCredentialsTest.java | 0 | get /hello http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …tty/ee9/test/PersistAuthenticationCredentialsTest.java | 0 | get /hello http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …ipse/jetty/server/handler/PathMappingsHandlerTest.java | 0 | get /hello http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …/java/org/eclipse/jetty/server/HttpConnectionTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …/java/org/eclipse/jetty/server/LocalConnectorTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …/java/org/eclipse/jetty/server/HttpServerTestBase.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/server/handler/EventsHandlerTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …lipse/jetty/server/handler/CrossOriginHandlerTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …eclipse/jetty/ee11/servlets/CrossOriginFilterTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …eclipse/jetty/ee10/servlets/CrossOriginFilterTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …/eclipse/jetty/ee9/servlets/CrossOriginFilterTest.java | 0 | get / http/1.1\r host: localhost\r connection: close\r \r | STRING |
| HIGH | …rc/test/java/org/eclipse/jetty/server/RequestTest.java | 0 | get %s http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …ipse/jetty/server/ComplianceViolationListenerTest.java | 0 | get %s http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …jetty/ee11/servlet/DefaultServletCombinationsTest.java | 0 | get %s http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …jetty/ee10/servlet/DefaultServletCombinationsTest.java | 0 | get %s http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …ipse/jetty/server/handler/PathMappingsHandlerTest.java | 0 | get %s http/1.1\r host: local\r connection: close\r | STRING |
| HIGH | …rc/test/java/org/eclipse/jetty/server/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: myhost:9999\r connection: close\r \r | STRING |
| HIGH | …t/java/org/eclipse/jetty/ee11/servlet/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: myhost:9999\r connection: close\r \r | STRING |
| HIGH | …t/java/org/eclipse/jetty/ee10/servlet/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: myhost:9999\r connection: close\r \r | STRING |
| HIGH | …est/java/org/eclipse/jetty/ee9/nested/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: myhost:9999\r connection: close\r \r | STRING |
| HIGH | …rc/test/java/org/eclipse/jetty/server/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: otherhost:8888\r connection: close\r \r | STRING |
| HIGH | …t/java/org/eclipse/jetty/ee11/servlet/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: otherhost:8888\r connection: close\r \r | STRING |
| HIGH | …t/java/org/eclipse/jetty/ee10/servlet/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: otherhost:8888\r connection: close\r \r | STRING |
| HIGH | …est/java/org/eclipse/jetty/ee9/nested/RequestTest.java | 0 | connect myhost:9999 http/1.1\r host: otherhost:8888\r connection: close\r \r | STRING |
| HIGH | …ava/org/eclipse/jetty/server/ThreadStarvationTest.java | 0 | put / http/1.0\r host: localhost\r content-length: 10\r \r 1 | STRING |
| HIGH | …/eclipse/jetty/ee11/servlets/ThreadStarvationTest.java | 0 | put / http/1.0\r host: localhost\r content-length: 10\r \r 1 | STRING |
| HIGH | …/eclipse/jetty/ee10/servlets/ThreadStarvationTest.java | 0 | put / http/1.0\r host: localhost\r content-length: 10\r \r 1 | STRING |
| HIGH | …g/eclipse/jetty/ee9/servlets/ThreadStarvationTest.java | 0 | put / http/1.0\r host: localhost\r content-length: 10\r \r 1 | STRING |
| HIGH | …ava/org/eclipse/jetty/server/ThreadStarvationTest.java | 0 | post / http/1.0\r host: localhost\r content-type: application/x-www-form-urlencoded\r content-length: 11\r \r a=1&b | STRING |
| HIGH | …/eclipse/jetty/ee11/servlets/ThreadStarvationTest.java | 0 | post / http/1.0\r host: localhost\r content-type: application/x-www-form-urlencoded\r content-length: 11\r \r a=1&b | STRING |
| HIGH | …/eclipse/jetty/ee10/servlets/ThreadStarvationTest.java | 0 | post / http/1.0\r host: localhost\r content-type: application/x-www-form-urlencoded\r content-length: 11\r \r a=1&b | STRING |
| HIGH | …/eclipse/jetty/server/handler/ResourceHandlerTest.java | 0 | get /context/one/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee11/servlet/DefaultServletTest.java | 0 | get /context/one/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee10/servlet/DefaultServletTest.java | 0 | get /context/one/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee10/servlet/ResourceServletTest.java | 0 | get /context/one/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …/eclipse/jetty/server/handler/ResourceHandlerTest.java | 0 | get /context/two/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee11/servlet/DefaultServletTest.java | 0 | get /context/two/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee10/servlet/DefaultServletTest.java | 0 | get /context/two/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee10/servlet/ResourceServletTest.java | 0 | get /context/two/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …/eclipse/jetty/server/handler/ResourceHandlerTest.java | 0 | get /context/three/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee11/servlet/DefaultServletTest.java | 0 | get /context/three/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee10/servlet/DefaultServletTest.java | 0 | get /context/three/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee10/servlet/ResourceServletTest.java | 0 | get /context/three/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …/eclipse/jetty/server/handler/ResourceHandlerTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee11/servlet/DefaultServletTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …se/jetty/ee11/servlet/ServletContextResourcesTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee11/servlet/ResourceServletTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee10/servlet/DefaultServletTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …se/jetty/ee10/servlet/ServletContextResourcesTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee10/servlet/ResourceServletTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …/org/eclipse/jetty/ee9/servlet/DefaultServletTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …pse/jetty/ee9/servlet/ServletContextResourcesTest.java | 0 | get /context/ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …/eclipse/jetty/server/handler/ResourceHandlerTest.java | 0 | get /context/index.html http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee11/servlet/DefaultServletTest.java | 0 | get /context/index.html http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee11/servlet/ResourceServletTest.java | 0 | get /context/index.html http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee10/servlet/DefaultServletTest.java | 0 | get /context/index.html http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee10/servlet/ResourceServletTest.java | 0 | get /context/index.html http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …/eclipse/jetty/server/handler/ResourceHandlerTest.java | 0 | get @prefix@ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …org/eclipse/jetty/ee11/servlet/DefaultServletTest.java | 0 | get @prefix@ http/1.1\r host: local\r connection: close\r \r | STRING |
| HIGH | …rg/eclipse/jetty/ee11/servlet/ResourceServletTest.java | 0 | get @prefix@ http/1.1\r host: local\r connection: close\r \r | STRING |
| 673 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/java/org/eclipse/jetty/docs/programming/JSONDocs.java | 98 | "address": "123 Main Street" | CODE |
| LOW | …/java/org/eclipse/jetty/docs/programming/JSONDocs.java | 197 | object.put("user", "John Doe"); | STRING |
| LOW | …/java/org/eclipse/jetty/docs/programming/JSONDocs.java | 206 | "user": "John Doe", | CODE |
| LOW | …a/org/eclipse/jetty/server/ConnectorCloseTestBase.java | 38 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. " + | CODE |
| LOW | …a/org/eclipse/jetty/server/ConnectorCloseTestBase.java | 38 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. " + | CODE |
| LOW | …eclipse/jetty/server/handler/gzip/GzipHandlerTest.java | 118 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. " + | CODE |
| LOW | …eclipse/jetty/server/handler/gzip/GzipHandlerTest.java | 118 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. " + | CODE |
| LOW | …y/test/client/transport/HttpClientCompressionTest.java | 42 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …y/test/client/transport/HttpClientCompressionTest.java | 42 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …/main/java/org/eclipse/jetty/io/jmh/Utf8Benchmark.java | 50 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor | CODE |
| LOW | …/main/java/org/eclipse/jetty/io/jmh/Utf8Benchmark.java | 50 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor | CODE |
| LOW | …11/servlet/ResourceServletCompressionCompleteTest.java | 137 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …11/servlet/ResourceServletCompressionCompleteTest.java | 137 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …/org/eclipse/jetty/ee11/servlets/AbstractGzipTest.java | 115 | builder.append("Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc.\n"); | CODE |
| LOW | …/org/eclipse/jetty/ee11/servlets/AbstractGzipTest.java | 115 | builder.append("Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc.\n"); | CODE |
| LOW | …/jetty/ee11/servlets/CompressionContentLengthTest.java | 242 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …/jetty/ee11/servlets/CompressionContentLengthTest.java | 242 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …1/websocket/jakarta/tests/server/ConfiguratorTest.java | 217 | sec.getUserProperties().put("fruit" + upgradeNum, "placeholder"); | CODE |
| LOW | …ipse/jetty/ee11/loginservice/JdbcLoginServiceTest.java | 53 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit."; | CODE |
| LOW | …ipse/jetty/ee11/loginservice/JdbcLoginServiceTest.java | 53 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit."; | CODE |
| LOW | …rg/eclipse/jetty/test/webapp/StressHTTP2AbortTest.java | 60 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | …rg/eclipse/jetty/test/webapp/StressHTTP2AbortTest.java | 60 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | …ava/org/eclipse/jetty/test/webapp/StressHTTP2Test.java | 62 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | …ava/org/eclipse/jetty/test/webapp/StressHTTP2Test.java | 62 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | …y-ee11-test-integration/src/test/resources/message.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …y-ee11-test-integration/src/test/resources/message.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …0/websocket/jakarta/tests/server/ConfiguratorTest.java | 217 | sec.getUserProperties().put("fruit" + upgradeNum, "placeholder"); | CODE |
| LOW | …10/servlet/ResourceServletCompressionCompleteTest.java | 137 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …10/servlet/ResourceServletCompressionCompleteTest.java | 137 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …/org/eclipse/jetty/ee10/servlets/AbstractGzipTest.java | 115 | builder.append("Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc.\n"); | CODE |
| LOW | …/org/eclipse/jetty/ee10/servlets/AbstractGzipTest.java | 115 | builder.append("Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc.\n"); | CODE |
| LOW | …ava/org/eclipse/jetty/test/webapp/StressHTTP2Test.java | 62 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | …ava/org/eclipse/jetty/test/webapp/StressHTTP2Test.java | 62 | Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore ma | CODE |
| LOW | …ipse/jetty/ee10/loginservice/JdbcLoginServiceTest.java | 53 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit."; | CODE |
| LOW | …ipse/jetty/ee10/loginservice/JdbcLoginServiceTest.java | 53 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit."; | CODE |
| LOW | …y-ee10-test-integration/src/test/resources/message.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …y-ee10-test-integration/src/test/resources/message.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …a/org/eclipse/jetty/ee9/servlets/AbstractGzipTest.java | 115 | builder.append("Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc.\n"); | CODE |
| LOW | …a/org/eclipse/jetty/ee9/servlets/AbstractGzipTest.java | 115 | builder.append("Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc.\n"); | CODE |
| LOW | …lipse/jetty/ee9/loginservice/JdbcLoginServiceTest.java | 53 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit."; | CODE |
| LOW | …lipse/jetty/ee9/loginservice/JdbcLoginServiceTest.java | 53 | "Lorem ipsum dolor sit amet, consectetur adipiscing elit."; | CODE |
| LOW | …ty-ee9-test-integration/src/test/resources/message.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …ty-ee9-test-integration/src/test/resources/message.txt | 1 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …ee9/servlet/DefaultServletCompressionCompleteTest.java | 244 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …ee9/servlet/DefaultServletCompressionCompleteTest.java | 244 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. In quis felis nunc. | CODE |
| LOW | …9/websocket/jakarta/tests/server/ConfiguratorTest.java | 217 | sec.getUserProperties().put("fruit" + upgradeNum, "placeholder"); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | jetty-home/src/main/resources/bin/jetty.sh | 23 | # ======================== | COMMENT |
| MEDIUM | jetty-home/src/main/resources/bin/jetty.sh | 27 | # ======================== | COMMENT |
| MEDIUM | …ore/jetty-start/src/test/resources/hb.1/home/start.ini | 1 | #=========================================================== | COMMENT |
| MEDIUM | …ore/jetty-start/src/test/resources/hb.1/home/start.ini | 3 | #=========================================================== | COMMENT |
| MEDIUM | …ore/jetty-start/src/test/resources/hb.1/base/start.ini | 1 | #=========================================================== | COMMENT |
| MEDIUM | …ore/jetty-start/src/test/resources/hb.1/base/start.ini | 3 | #=========================================================== | COMMENT |
| MEDIUM | …rt/src/test/resources/jetty home with spaces/start.ini | 1 | #=========================================================== | COMMENT |
| MEDIUM | …rt/src/test/resources/jetty home with spaces/start.ini | 3 | #=========================================================== | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …jetty/docs/programming/server/http/HTTPServerDocs.java | 911 | class MultiPartFormDataHandler extends Handler.Abstract.NonBlocking | STRING |
| LOW | …lipse/jetty/server/ForwardedRequestCustomizerTest.java | 1433 | private static class RequestHandler extends Handler.Abstract | CODE |
| LOW | …ava/org/eclipse/jetty/server/ConnectorTimeoutTest.java | 526 | protected static class SlowResponseHandler extends Handler.Abstract | STRING |
| LOW | …/java/org/eclipse/jetty/server/HttpServerTestBase.java | 1795 | private static class WriteBodyAfterNoBodyResponseHandler extends Handler.Abstract | STRING |
| LOW | …va/org/eclipse/jetty/server/HttpServerTestFixture.java | 213 | protected static class DataHandler extends Handler.Abstract | CODE |
| LOW | …pse/jetty/server/ssl/ServerConnectorSslServerTest.java | 223 | public static class SecureRequestHandler extends Handler.Abstract | CODE |
| LOW | …ipse/jetty/server/handler/BufferedResponseHandler.java | 58 | public class BufferedResponseHandler extends ConditionalHandler.Abstract | CODE |
| LOW | …/org/eclipse/jetty/server/internal/HttpConnection.java | 1088 | protected class RequestHandler implements HttpParser.RequestHandler | CODE |
| LOW | …se/jetty/ee9/nested/HttpManyWaysToAsyncCommitTest.java | 231 | private class SetHandledWriteSomeDataHandler extends ThrowExceptionOnDemandHandler | CODE |
| LOW | …est/java/org/eclipse/jetty/ee9/nested/RequestTest.java | 2215 | private static class RequestHandler extends AbstractHandler | STRING |
| LOW | …est/java/org/eclipse/jetty/ee9/nested/RequestTest.java | 2236 | private static class MultiPartRequestHandler extends AbstractHandler | STRING |
| LOW | …est/java/org/eclipse/jetty/ee9/nested/RequestTest.java | 2294 | private static class BadMultiPartRequestHandler extends AbstractHandler | STRING |
| LOW | …eclipse/jetty/ee9/nested/HttpManyWaysToCommitTest.java | 136 | private class SetHandledWriteSomeDataHandler extends ThrowExceptionOnDemandHandler | CODE |
| LOW | …clipse/jetty/ee9/nested/ServletRequestWrapperTest.java | 72 | private class RequestHandler extends AbstractHandler | CODE |
| LOW | …rg/eclipse/jetty/ee9/nested/HttpServerTestFixture.java | 202 | protected static class DataHandler extends Handler.Abstract | CODE |
| LOW | …ipse/jetty/ee9/nested/FileBufferedResponseHandler.java | 52 | public class FileBufferedResponseHandler extends BufferedResponseHandler | CODE |
| LOW | …/eclipse/jetty/ee9/nested/BufferedResponseHandler.java | 56 | public class BufferedResponseHandler extends HandlerWrapper | CODE |
| LOW | …ava/org/eclipse/jetty/ee9/security/ConstraintTest.java | 2851 | private class RequestHandler extends AbstractHandler | STRING |
| LOW | …ava/org/eclipse/jetty/ee9/security/ConstraintTest.java | 2909 | private class ProgrammaticLoginRequestHandler extends AbstractHandler | STRING |
| LOW | …ipse/jetty/ee9/security/SpecExampleConstraintTest.java | 331 | private class RequestHandler extends AbstractHandler | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …org/eclipse/jetty/ee11/proxy/AbstractProxyServlet.java | 127 | // Put the HttpClient in the context to leverage ContextHandler.MANAGED_ATTRIBUTES | COMMENT |
| MEDIUM | …org/eclipse/jetty/ee10/proxy/AbstractProxyServlet.java | 127 | // Put the HttpClient in the context to leverage ContextHandler.MANAGED_ATTRIBUTES | COMMENT |
| MEDIUM | …/org/eclipse/jetty/ee9/proxy/AbstractProxyServlet.java | 128 | // Put the HttpClient in the context to leverage ContextHandler.MANAGED_ATTRIBUTES | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …org/eclipse/jetty/ee11/servlets/CrossOriginFilter.java | 380 | // TODO: implement better detection of simple headers | COMMENT |
| LOW | …org/eclipse/jetty/ee10/servlets/CrossOriginFilter.java | 380 | // TODO: implement better detection of simple headers | COMMENT |
| LOW | …/org/eclipse/jetty/ee9/servlets/CrossOriginFilter.java | 380 | // TODO: implement better detection of simple headers | COMMENT |