Spring Framework
This report summarizes scanner evidence for spring-projects/spring-framework, a Java project with 60,303 GitHub stars. SynthScan examined 1,581,304 lines of code across 10444 source files, recording 504 pattern matches distributed across 9 syntactic categories. The legacy adjusted pattern signal is 0.9 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 100 finding(s).
Are imports declared and package/API names verified? 371 finding(s).
Are wrappers, guards, and repeated structures necessary? 47 finding(s).
Which changes need focused human review? 504 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 504 distinct pattern matches across 9 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ork/web/reactive/socket/WebSocketIntegrationTests.java | 236 | new org.eclipse.jetty.websocket.client.WebSocketClient(); | CODE |
| CRITICAL | …result/method/annotation/InitBinderBindingContext.java | 80 | return new org.springframework.web.reactive.result.ExtendedWebExchangeDataBinder(target, name); | CODE |
| CRITICAL | …k/web/reactive/socket/client/JettyWebSocketClient.java | 58 | this(new org.eclipse.jetty.websocket.client.WebSocketClient()); | CODE |
| CRITICAL⚡ | …ramework/r2dbc/connection/R2dbcTransactionManager.java | 453 | if (io.r2dbc.spi.TransactionDefinition.ISOLATION_LEVEL.equals(option)) { | CODE |
| CRITICAL⚡ | …ramework/r2dbc/connection/R2dbcTransactionManager.java | 456 | if (io.r2dbc.spi.TransactionDefinition.NAME.equals(option)) { | CODE |
| CRITICAL⚡ | …ramework/r2dbc/connection/R2dbcTransactionManager.java | 459 | if (io.r2dbc.spi.TransactionDefinition.READ_ONLY.equals(option)) { | CODE |
| CRITICAL⚡ | …ramework/r2dbc/connection/R2dbcTransactionManager.java | 462 | if (io.r2dbc.spi.TransactionDefinition.LOCK_WAIT_TIMEOUT.equals(option) && | CODE |
| CRITICAL | …gframework/orm/jpa/EntityManagerFactoryUtilsTests.java | 52 | * 'org.springframework.orm.jpa.EntityManagerFactoryUtils.doGetEntityManager(EntityManagerFactory)' | COMMENT |
| CRITICAL | …gframework/orm/jpa/EntityManagerFactoryUtilsTests.java | 113 | * 'org.springframework.orm.jpa.EntityManagerFactoryUtils.convertJpaAccessException(PersistenceException)' | COMMENT |
| CRITICAL | …pringframework/jms/core/JmsMessagingTemplateTests.java | 239 | throw new org.springframework.jms.support.converter.MessageConversionException("Test exception"); | CODE |
| CRITICAL | …mework/jdbc/core/support/JdbcBeanDefinitionReader.java | 63 | this.propReader = new org.springframework.beans.factory.support.PropertiesBeanDefinitionReader(beanFactory); | CODE |
| CRITICAL | …ringframework/aot/test/ReflectionInvocationsTests.java | 37 | RuntimeHintsInvocations invocations = org.springframework.aot.test.agent.RuntimeHintsRecorder.record(() -> { | CODE |
| CRITICAL | …ringframework/aot/test/ReflectionInvocationsTests.java | 49 | RuntimeHintsInvocations invocations = org.springframework.aot.test.agent.RuntimeHintsRecorder.record(() -> { | CODE |
| CRITICAL | …g/springframework/expression/spel/EvaluationTests.java | 339 | evaluateAndCheckError("new org.springframework.expression.spel.testresources.Inventor().inventions[1]", | STRING |
| CRITICAL | …g/springframework/expression/spel/EvaluationTests.java | 960 | evaluate("new org.springframework.expression.spel.testresources.PlaceOfBirth(inventions[0].toString()).city", | STRING |
| CRITICAL | …gframework/expression/spel/SpelDocumentationTests.java | 550 | parser.parseExpression("new org.springframework.expression.spel.testresources.Inventor('Albert Einstein',new java.u | CODE |
| CRITICAL | …gframework/expression/spel/SpelDocumentationTests.java | 553 | parser.parseExpression("members.add(new org.springframework.expression.spel.testresources.Inventor('Albert Einstein', | CODE |
| CRITICAL | …rg/springframework/expression/spel/SpelReproTests.java | 1263 | context.setVariable("bridgeExample", new org.springframework.expression.spel.spr10210.D()); | CODE |
| CRITICAL | …t/hints/testing/SampleReflectionRuntimeHintsTests.java | 46 | RuntimeHintsInvocations invocations = org.springframework.aot.test.agent.RuntimeHintsRecorder.record(() -> { | CODE |
| CRITICAL | …ringframework/aot/test/agent/RuntimeHintsRecorder.java | 55 | Assert.state(org.springframework.aot.agent.RuntimeHintsAgent.isLoaded(), "RuntimeHintsAgent must be loaded in the curr | CODE |
| CRITICAL⚡ | …t/TransactionalApplicationListenerSynchronization.java | 79 | if (org.springframework.transaction.support.TransactionSynchronizationManager.isSynchronizationActive() && | CODE |
| CRITICAL⚡ | …t/TransactionalApplicationListenerSynchronization.java | 80 | org.springframework.transaction.support.TransactionSynchronizationManager.isActualTransactionActive()) { | CODE |
| CRITICAL⚡ | …t/TransactionalApplicationListenerSynchronization.java | 81 | org.springframework.transaction.support.TransactionSynchronizationManager.registerSynchronization( | CODE |
| CRITICAL | …mework/aop/aspectj/AspectJExpressionPointcutTests.java | 69 | String expression = "execution(int org.springframework.beans.testfixture.beans.TestBean.getAge())"; | CODE |
| CRITICAL | …mework/aop/aspectj/AspectJExpressionPointcutTests.java | 189 | String expression = "execution(void org.springframework.beans.testfixture.beans.TestBean.setSomeNumber(Number)) && arg | CODE |
| CRITICAL | …mework/aop/aspectj/AspectJExpressionPointcutTests.java | 210 | String expression = "execution(int org.springframework.beans.testfixture.beans.TestBean.getAge())"; | CODE |
| CRITICAL | …mework/aop/aspectj/AspectJExpressionPointcutTests.java | 223 | String expression = "execution(void org.springframework.beans.testfixture.beans.TestBean.setSomeNumber(Number)) && arg | CODE |
| CRITICAL | …mework/aop/aspectj/AspectJExpressionPointcutTests.java | 237 | String expression = "execution(void org.springframework.beans.testfixture.beans.TestBean.setSomeNumber(Number) && args | CODE |
| CRITICAL | …mework/aop/aspectj/AspectJExpressionPointcutTests.java | 267 | String expression = "call(int org.springframework.beans.testfixture.beans.TestBean.getAge())"; | CODE |
| CRITICAL | …ctj/annotation/AbstractAspectJAdvisorFactoryTests.java | 647 | @Around("org.springframework.aop.aspectj.annotation.AbstractAspectJAdvisorFactoryTests.CommonPointcuts.getAge()()") | CODE |
| CRITICAL | …ctj/annotation/AbstractAspectJAdvisorFactoryTests.java | 671 | @Around("org.springframework.aop.aspectj.annotation.AbstractAspectJAdvisorFactoryTests.Library.propertyAccess()") | CODE |
| CRITICAL | …ctj/annotation/AbstractAspectJAdvisorFactoryTests.java | 676 | @Around(value="org.springframework.aop.aspectj.annotation.AbstractAspectJAdvisorFactoryTests.Library.integerArgOperati | CODE |
| CRITICAL | …ctj/annotation/AbstractAspectJAdvisorFactoryTests.java | 697 | @Around(value="org.springframework.aop.aspectj.annotation.AbstractAspectJAdvisorFactoryTests.Library.integerArgOperati | CODE |
| CRITICAL | …framework/aop/testfixture/aspectj/TwoAdviceAspect.java | 29 | @Around("execution(* org.springframework.beans.testfixture.beans.ITestBean.age())") | CODE |
| CRITICAL | …framework/aop/testfixture/aspectj/TwoAdviceAspect.java | 34 | @Before("execution(* org.springframework.beans.testfixture.beans.ITestBean.setAge(int)) && args(newAge)") | CODE |
| CRITICAL | …ngframework/aop/testfixture/aspectj/PerThisAspect.java | 23 | @Aspect("perthis(org.springframework.aop.testfixture.aspectj.CommonPointcuts.getAgeExecution())") | CODE |
| CRITICAL | …ngframework/aop/testfixture/aspectj/PerThisAspect.java | 32 | @Around("org.springframework.aop.testfixture.aspectj.CommonPointcuts.getAgeExecution()") | CODE |
| CRITICAL | …http/server/reactive/bootstrap/ReactorHttpsServer.java | 50 | this.reactorServer = reactor.netty.http.server.HttpServer.create() | CODE |
| CRITICAL | …/http/server/reactive/bootstrap/ReactorHttpServer.java | 41 | this.reactorServer = reactor.netty.http.server.HttpServer.create() | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 55 | @com.fasterxml.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 56 | @tools.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 59 | @com.fasterxml.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 60 | @tools.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 63 | @com.fasterxml.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 64 | @tools.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 67 | @com.fasterxml.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 68 | @tools.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 71 | @com.fasterxml.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 72 | @tools.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 79 | @com.fasterxml.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL⚡ | …/http/converter/json/ProblemDetailJacksonXmlMixin.java | 80 | @tools.jackson.dataformat.xml.annotation.JacksonXmlProperty(namespace = NAMESPACE) | CODE |
| CRITICAL | …ingframework/http/client/ReactorClientHttpRequest.java | 103 | .request(io.netty.handler.codec.http.HttpMethod.valueOf(this.method.name())); | CODE |
| CRITICAL | …k/http/client/reactive/ReactorClientHttpConnector.java | 162 | .request(io.netty.handler.codec.http.HttpMethod.valueOf(method.name())); | CODE |
| CRITICAL | …org/springframework/context/annotation/MyTestBean.java | 27 | return new org.springframework.beans.testfixture.beans.TestBean(); | CODE |
| CRITICAL | …k/context/annotation/FooServiceDependentConverter.java | 37 | return new org.springframework.beans.testfixture.beans.TestBean(source); | CODE |
| CRITICAL | …annotation/CommonAnnotationBeanPostProcessorTests.java | 231 | org.springframework.beans.factory.config.PropertyPlaceholderConfigurer ppc = new org.springframework.beans.factory.con | CODE |
| CRITICAL | …annotation/CommonAnnotationBeanPostProcessorTests.java | 316 | org.springframework.beans.factory.config.PropertyPlaceholderConfigurer ppc = new org.springframework.beans.factory.con | CODE |
| CRITICAL | …annotation/CommonAnnotationBeanPostProcessorTests.java | 367 | org.springframework.beans.factory.config.PropertyPlaceholderConfigurer ppc = new org.springframework.beans.factory.con | CODE |
| CRITICAL | …ork/context/annotation/EnableLoadTimeWeavingTests.java | 185 | @Around("execution(String org.springframework.context.annotation.EnableLoadTimeWeavingTests.Greeter.get())") | CODE |
| CRITICAL | …guration/ConfigurationClassAspectIntegrationTests.java | 130 | @Before("execution(* org.springframework.beans.testfixture.beans.TestBean.absquatulate(..)) && target(testBean)") | CODE |
| 25 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …rces/org/springframework/web/reactive/function/foo.txt | 1 | Lorem Ipsum. | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 3 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 3 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 13 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 13 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 19 | Suspendisse sodales, est at ullamcorper varius, elit nunc cursus sem, nec lobortis libero ex at erat. In auctor a lorem | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 271 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 271 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 279 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 279 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 285 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 285 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 287 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 287 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 319 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 319 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 329 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 329 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 335 | Suspendisse sodales, est at ullamcorper varius, elit nunc cursus sem, nec lobortis libero ex at erat. In auctor a lorem | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 587 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 587 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 595 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 595 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 601 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 601 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 603 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 603 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 635 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 635 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 645 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 645 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 651 | Suspendisse sodales, est at ullamcorper varius, elit nunc cursus sem, nec lobortis libero ex at erat. In auctor a lorem | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 903 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 903 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 911 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 911 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 917 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 917 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 919 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 919 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 951 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 951 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 961 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 961 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 967 | Suspendisse sodales, est at ullamcorper varius, elit nunc cursus sem, nec lobortis libero ex at erat. In auctor a lorem | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1219 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1219 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1227 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1227 | Morbi viverra nunc sit amet euismod congue. Ut arcu ipsum, bibendum non lectus id, ornare iaculis dolor. Sed quis venena | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1233 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1233 | Fusce ultricies sapien enim, sit amet feugiat nulla rutrum sit amet. Maecenas varius porttitor scelerisque. Lorem ipsum | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1235 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1235 | Suspendisse porta nulla sit amet urna eleifend dictum. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis vul | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1267 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1267 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas purus urna, maximus vel tristique vitae, cursus ut lib | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1277 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1277 | Sed iaculis massa lectus, quis hendrerit urna aliquet vel. Donec dapibus gravida dui et accumsan. Suspendisse in ligula | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1283 | Suspendisse sodales, est at ullamcorper varius, elit nunc cursus sem, nec lobortis libero ex at erat. In auctor a lorem | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1535 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| LOW⚡ | …amework/web/reactive/function/client/largeTextFile.txt | 1535 | Curabitur auctor, magna ac semper cursus, leo metus aliquet lorem, ut molestie tellus turpis non purus. Integer nec nisi | CODE |
| 226 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …ve/result/method/annotation/MethodValidationTests.java | 0 | field error in object 'student' on field 'name': rejected value [faustino1234]; \ codes [size.student.name,size.name,siz | STRING |
| HIGH | …rvlet/mvc/method/annotation/MethodValidationTests.java | 0 | field error in object 'student' on field 'name': rejected value [faustino1234]; \ codes [size.student.name,size.name,siz | STRING |
| HIGH | …ation/beanvalidation/MethodValidationAdapterTests.java | 0 | field error in object 'student' on field 'name': rejected value [faustino1234]; \ codes [size.student.name,size.name,siz | STRING |
| HIGH | …ve/result/method/annotation/MethodValidationTests.java | 0 | field error in object 'person' on field 'name': rejected value [faustino1234]; \ codes [size.person.name,size.name,size. | STRING |
| HIGH | …rvlet/mvc/method/annotation/MethodValidationTests.java | 0 | field error in object 'person' on field 'name': rejected value [faustino1234]; \ codes [size.person.name,size.name,size. | STRING |
| HIGH | …/beanvalidation/MethodValidationProxyReactorTests.java | 0 | field error in object 'person' on field 'name': rejected value [faustino1234]; \ codes [size.person.name,size.name,size. | STRING |
| HIGH | …ation/beanvalidation/MethodValidationAdapterTests.java | 0 | field error in object 'person' on field 'name': rejected value [faustino1234]; \ codes [size.person.name,size.name,size. | STRING |
| HIGH | …thod/annotation/RequestMappingHandlerMappingTests.java | 0 | private method [%s] on cglib proxy class [%s] cannot be used as a request \ handler method, because private methods cann | STRING |
| HIGH | …lt/method/annotation/RequestMappingHandlerMapping.java | 0 | private method [%s] on cglib proxy class [%s] cannot be used as a request \ handler method, because private methods cann | STRING |
| HIGH | …thod/annotation/RequestMappingHandlerMappingTests.java | 0 | private method [%s] on cglib proxy class [%s] cannot be used as a request \ handler method, because private methods cann | STRING |
| HIGH | …vc/method/annotation/RequestMappingHandlerMapping.java | 0 | private method [%s] on cglib proxy class [%s] cannot be used as a request \ handler method, because private methods cann | STRING |
| HIGH | …thod/annotation/RequestMappingHandlerMappingTests.java | 0 | package-private method [%s] declared in class [%s] cannot be advised by \ cglib-proxied handler class [%s], because it i | STRING |
| HIGH | …lt/method/annotation/RequestMappingHandlerMapping.java | 0 | package-private method [%s] declared in class [%s] cannot be advised by \ cglib-proxied handler class [%s], because it i | STRING |
| HIGH | …thod/annotation/RequestMappingHandlerMappingTests.java | 0 | package-private method [%s] declared in class [%s] cannot be advised by \ cglib-proxied handler class [%s], because it i | STRING |
| HIGH | …vc/method/annotation/RequestMappingHandlerMapping.java | 0 | package-private method [%s] declared in class [%s] cannot be advised by \ cglib-proxied handler class [%s], because it i | STRING |
| HIGH | …hod/annotation/AbstractNamedValueArgumentResolver.java | 0 | name for argument of type [%s] not specified, and parameter name information not \ available via reflection. ensure that | STRING |
| HIGH | …reactive/AbstractNamedValueMethodArgumentResolver.java | 0 | name for argument of type [%s] not specified, and parameter name information not \ available via reflection. ensure that | STRING |
| HIGH | …/support/AbstractNamedValueMethodArgumentResolver.java | 0 | name for argument of type [%s] not specified, and parameter name information not \ available via reflection. ensure that | STRING |
| HIGH | …ervice/invoker/AbstractNamedValueArgumentResolver.java | 0 | name for argument of type [%s] not specified, and parameter name information not \ available via reflection. ensure that | STRING |
| HIGH | …notation/AbstractNamedValueMethodArgumentResolver.java | 0 | name for argument of type [%s] not specified, and parameter name information not \ available via reflection. ensure that | STRING |
| HIGH | …ttp/converter/xml/SourceHttpMessageConverterTests.java | 0 | <?xml version="1.0"?> <!doctype lolz [ <!entity lol "lol"> <!element lolz (#pcdata)> <!entity lol1 "&lol;&lol;&lol;&lol; | STRING |
| HIGH | …ter/xml/Jaxb2RootElementHttpMessageConverterTests.java | 0 | <?xml version="1.0"?> <!doctype lolz [ <!entity lol "lol"> <!element lolz (#pcdata)> <!entity lol1 "&lol;&lol;&lol;&lol; | STRING |
| HIGH | …converter/xml/JacksonXmlHttpMessageConverterTests.java | 0 | <?xml version="1.0"?> <!doctype lolz [ <!entity lol "lol"> <!element lolz (#pcdata)> <!entity lol1 "&lol;&lol;&lol;&lol; | STRING |
| HIGH | …r/xml/MappingJackson2XmlHttpMessageConverterTests.java | 0 | <?xml version="1.0"?> <!doctype lolz [ <!entity lol "lol"> <!element lolz (#pcdata)> <!entity lol1 "&lol;&lol;&lol;&lol; | STRING |
| HIGH | …rter/xml/Jaxb2CollectionHttpMessageConverterTests.java | 0 | <?xml version="1.0"?> <!doctype lolz [ <!entity lol "lol"> <!element lolz (#pcdata)> <!entity lol1 "&lol;&lol;&lol;&lol; | STRING |
| HIGH | …verride/BeanOverrideBeanFactoryPostProcessorTests.java | 0 | unable to wrap bean: there is no bean with name 'beantospy' and \ type java.lang.string (as required by field 'bynamesin | STRING |
| HIGH | …st/context/bean/override/convention/TestBeanTests.java | 0 | unable to wrap bean: there is no bean with name 'beantospy' and \ type java.lang.string (as required by field 'bynamesin | STRING |
| HIGH | …erride/mockito/MockitoBeanConfigurationErrorTests.java | 0 | unable to wrap bean: there is no bean with name 'beantospy' and \ type java.lang.string (as required by field 'bynamesin | STRING |
| HIGH | …ide/mockito/MockitoSpyBeanConfigurationErrorTests.java | 0 | unable to wrap bean: there is no bean with name 'beantospy' and \ type java.lang.string (as required by field 'bynamesin | STRING |
| HIGH | …verride/BeanOverrideBeanFactoryPostProcessorTests.java | 0 | unable to override bean: there are no beans of \ type java.lang.string (as required by field 'failurebytypelookup.exampl | STRING |
| HIGH | …st/context/bean/override/convention/TestBeanTests.java | 0 | unable to override bean: there are no beans of \ type java.lang.string (as required by field 'failurebytypelookup.exampl | STRING |
| HIGH | …ide/mockito/MockitoSpyBeanConfigurationErrorTests.java | 0 | unable to override bean: there are no beans of \ type java.lang.string (as required by field 'failurebytypelookup.exampl | STRING |
| HIGH | …erride/mockito/MockitoBeanConfigurationErrorTests.java | 0 | unable to override bean: there are no beans of \ type java.lang.string (as required by field 'failurebytypelookup.exampl | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ork/expression/spel/support/ReflectionHelperTests.java | 61 | @Test | COMMENT |
| LOW | …ngframework/expression/spel/standard/SpelCompiler.java | 181 | cw.visitEnd(); | COMMENT |
| LOW | …pringframework/expression/spel/standard/Tokenizer.java | 321 | this.pos++; | COMMENT |
| LOW | …ession/spel/standard/InternalSpelExpressionParser.java | 521 | } | COMMENT |
| LOW | …rk/docs/web/webfluxfnhandlerclasses/PersonHandler.java | 41 | } | COMMENT |
| LOW | …op/ataspectj/aopataspectjexample/service/Idempotent.kt | 21 | // marker annotation | COMMENT |
| LOW | …test/context/cache/UnusedContextsIntegrationTests.java | 181 | // active context used by EnclosingTestCase. | COMMENT |
| LOW | …test/context/cache/UnusedContextsIntegrationTests.java | 281 | // We see a ContextPausedEvent here, since ContextHierarchyLevel3a1TestCase | COMMENT |
| LOW | …ingframework/test/context/aot/AotIntegrationTests.java | 141 | List<Class<?>> testClasses = createTestClassScanner() | COMMENT |
| LOW | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 121 | case REPLACE -> replaceOrCreateBean(beanFactory, handler, generatedBeanNames, true); | COMMENT |
| LOW | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 141 | // 4) Create bean by-name, with a provided name | COMMENT |
| LOW | …java/org/springframework/core/ResolvableTypeTests.java | 1121 | @Test | COMMENT |
| LOW | …org/springframework/core/SimpleAliasRegistryTests.java | 261 | // Original state: | COMMENT |
| LOW | …org/springframework/core/SimpleAliasRegistryTests.java | 301 | registerAlias(NAME5, ALIAS5); | COMMENT |
| LOW | …rc/main/java/org/springframework/asm/CurrentFrame.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …va/org/springframework/asm/RecordComponentVisitor.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …rc/main/java/org/springframework/asm/MethodWriter.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …-core/src/main/java/org/springframework/asm/Label.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …-core/src/main/java/org/springframework/asm/Label.java | 201 | COMMENT | |
| LOW | …g-core/src/main/java/org/springframework/asm/Type.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …src/main/java/org/springframework/asm/SymbolTable.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …c/main/java/org/springframework/asm/MethodVisitor.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …ore/src/main/java/org/springframework/asm/Handler.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …-core/src/main/java/org/springframework/asm/Frame.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …ain/java/org/springframework/asm/AnnotationWriter.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …src/main/java/org/springframework/asm/FieldWriter.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …ore/src/main/java/org/springframework/asm/Context.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …main/java/org/springframework/asm/ConstantDynamic.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …ava/org/springframework/asm/RecordComponentWriter.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …/src/main/java/org/springframework/asm/ByteVector.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …re/src/main/java/org/springframework/asm/TypePath.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …src/main/java/org/springframework/asm/ClassWriter.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …rc/main/java/org/springframework/asm/FieldVisitor.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …rc/main/java/org/springframework/asm/ClassVisitor.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …rc/main/java/org/springframework/asm/ModuleWriter.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …core/src/main/java/org/springframework/asm/Symbol.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …c/main/java/org/springframework/asm/ModuleVisitor.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …ore/src/main/java/org/springframework/asm/Opcodes.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …src/main/java/org/springframework/asm/ClassReader.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …src/main/java/org/springframework/asm/ClassReader.java | 201 | // throw new IllegalArgumentException( | COMMENT |
| LOW | …src/main/java/org/springframework/asm/ClassReader.java | 1861 | methodVisitor.visitTryCatchBlock(start, end, handler, catchType); | COMMENT |
| LOW | …src/main/java/org/springframework/asm/ClassReader.java | 2021 | // does not currently have any frame. These inserted frames must be computed by simulating the | COMMENT |
| LOW | …e/src/main/java/org/springframework/asm/Attribute.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …in/java/org/springframework/asm/AnnotationVisitor.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …c/main/java/org/springframework/asm/TypeReference.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …core/src/main/java/org/springframework/asm/Handle.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …g-core/src/main/java/org/springframework/asm/Edge.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …va/org/springframework/asm/ClassTooLargeException.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …a/org/springframework/asm/MethodTooLargeException.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| LOW | …e/src/main/java/org/springframework/asm/Constants.java | 1 | // ASM: a very small and fast Java bytecode manipulation framework | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/transaction/interceptor/TransactionAspectSupport.java | 95 | // NOTE: This class must not implement Serializable because it serves as base | COMMENT |
| LOW | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 130 | // NOTE: This method supports 3 distinct scenarios which must be accounted for. | COMMENT |
| LOW⚡ | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 373 | // Step 0: none or only one | COMMENT |
| LOW⚡ | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 382 | // Step 1: check primary candidate | COMMENT |
| LOW⚡ | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 388 | // Step 2: use the field name or parameter name as a fallback qualifier | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 1666 | // Step 1: pre-resolved shortcut for single bean match, for example, from @Autowired | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 1674 | // Step 2: pre-defined value or expression, for example, from @Value | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 1695 | // Step 3: shortcut for declared dependency name or qualifier-suggested name matching target bean name | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 1739 | // Step 5: determine single candidate | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 1763 | // Step 6: validate single result | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 2039 | // Step 1: check primary candidate | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 2062 | // Step 3: check highest priority candidate | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 2067 | // Step 4: pick unique default-candidate | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 2072 | // Step 5: pick directly registered dependency | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 373 | // Step 0: none or only one | COMMENT |
| LOW⚡ | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 382 | // Step 1: check primary candidate | COMMENT |
| LOW⚡ | …ean/override/BeanOverrideBeanFactoryPostProcessor.java | 388 | // Step 2: use the field name or parameter name as a fallback qualifier | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 1666 | // Step 1: pre-resolved shortcut for single bean match, for example, from @Autowired | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 1674 | // Step 2: pre-defined value or expression, for example, from @Value | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 1695 | // Step 3: shortcut for declared dependency name or qualifier-suggested name matching target bean name | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 1739 | // Step 5: determine single candidate | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 1763 | // Step 6: validate single result | COMMENT |
| LOW | …/beans/factory/support/DefaultListableBeanFactory.java | 2039 | // Step 1: check primary candidate | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 2062 | // Step 3: check highest priority candidate | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 2067 | // Step 4: pick unique default-candidate | COMMENT |
| LOW⚡ | …/beans/factory/support/DefaultListableBeanFactory.java | 2072 | // Step 5: pick directly registered dependency | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ork/orm/jpa/persistenceunit/PersistenceUnitReader.java | 164 | // to leverage XXE attacks. This does not qualify as privilege escalation. | COMMENT |
| MEDIUM | …work/jms/listener/DefaultMessageListenerContainer.java | 337 | * {@link #CACHE_CONNECTION} or {@link #CACHE_SESSION} even in conjunction with an | COMMENT |
| MEDIUM | …amework/scheduling/quartz/LocalDataSourceJobStore.java | 98 | // Absolutely needs thread-bound DataSource to initialize. | COMMENT |
| MEDIUM | …ork/scheduling/quartz/LocalTaskExecutorThreadPool.java | 60 | // Absolutely needs thread-bound Executor to initialize. | COMMENT |
| LOW | …/aop/aspectj/AspectJAdviceParameterNameDiscoverer.java | 110 | * be logged and the {@link #getParameterNames(Method)} method will simply return | COMMENT |
| MEDIUM | …rg/springframework/web/servlet/view/xslt/XsltView.java | 216 | // to leverage XXE attacks. This does not qualify as privilege escalation. | COMMENT |
| MEDIUM | …a/org/springframework/beans/TypeConverterDelegate.java | 255 | // Definitely doesn't match: throw IllegalArgumentException/IllegalStateException | COMMENT |
| MEDIUM | …framework/beans/factory/xml/DefaultDocumentLoader.java | 93 | // to leverage XXE attacks. This does not qualify as privilege escalation. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …function/server/RenderingResponseIntegrationTests.java | 112 | private static class RenderingResponseHandler { | CODE |
| LOW | …ramework/docs/web/webfluxfnrequest/RequestHandler.java | 23 | public class RequestHandler { | CODE |
| LOW | …mework/docs/web/webfluxfnresponse/ResponseHandler.java | 23 | public class ResponseHandler { | CODE |
| LOW | …gframework/docs/web/webfluxfnrequest/RequestHandler.kt | 22 | class RequestHandler { | CODE |
| LOW | …ramework/docs/web/webfluxfnresponse/ResponseHandler.kt | 23 | class ResponseHandler { | CODE |
| LOW | …erver/reactive/ServerHttpsRequestIntegrationTests.java | 90 | private static class CheckRequestHandler implements HttpHandler { | CODE |
| LOW | …server/reactive/ServerHttpRequestIntegrationTests.java | 50 | static class CheckRequestHandler implements HttpHandler { | CODE |
| LOW | …ver/reactive/MultipartHttpHandlerIntegrationTests.java | 88 | static class CheckRequestHandler implements WebHandler { | CODE |
| LOW | …socket/server/support/WebSocketHttpRequestHandler.java | 59 | public class WebSocketHttpRequestHandler implements HttpRequestHandler, Lifecycle, ServletContextAware { | CODE |
| LOW | …eb/socket/sockjs/support/SockJsHttpRequestHandler.java | 52 | public class SockJsHttpRequestHandler | CODE |
| LOW | …mework/web/servlet/handler/AbstractHandlerMapping.java | 795 | private final class PreFlightHttpRequestHandler | CODE |
| LOW | …eb/servlet/handler/DefaultPreFlightRequestHandler.java | 60 | public class DefaultPreFlightRequestHandler | CODE |
| LOW | …servlet/resource/DefaultServletHttpRequestHandler.java | 55 | public class DefaultServletHttpRequestHandler implements HttpRequestHandler, ServletContextAware { | CODE |
| LOW | …k/web/servlet/resource/ResourceHttpRequestHandler.java | 97 | public class ResourceHttpRequestHandler extends WebContentGenerator | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/datasource/lookup/IsolationLevelDataSourceRouter.java | 77 | * don't forget to switch the "allowCustomIsolationLevels" flag to "true". | COMMENT |
| MEDIUM | …y/annotation/AutowiredAnnotationBeanPostProcessor.java | 141 | * <p>In addition to regular injection points as discussed above, this post-processor | COMMENT |