SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.10.4

Threshold is medium

Effort is default

Summary

Classes	Bugs	Errors	Missing Classes
44	4	0	0

Files

Class	Bugs
org.apache.commons.xml.secure.SecureSAXParser	2
org.apache.commons.xml.secure.SecureTransformerHandler	1
org.apache.commons.xml.secure.SecureXMLReader	1

org.apache.commons.xml.secure.SecureSAXParser

Bug	Category	Details	Line	Priority
org.apache.commons.xml.secure.SecureSAXParser.getParser() may expose internal representation by returning SecureSAXParser.secureParser	MALICIOUS_CODE	EI_EXPOSE_REP	68	Medium
org.apache.commons.xml.secure.SecureSAXParser.getXMLReader() may expose internal representation by returning SecureSAXParser.secureXMLReader	MALICIOUS_CODE	EI_EXPOSE_REP	86	Medium

org.apache.commons.xml.secure.SecureTransformerHandler

Bug	Category	Details	Line	Priority
org.apache.commons.xml.secure.SecureTransformerHandler.getTransformer() may expose internal representation by returning SecureTransformerHandler.transformer	MALICIOUS_CODE	EI_EXPOSE_REP	114	Medium

org.apache.commons.xml.secure.SecureXMLReader

Bug	Category	Details	Line	Priority
Exception thrown in class org.apache.commons.xml.secure.SecureXMLReader at new org.apache.commons.xml.secure.SecureXMLReader(XMLReader) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks.	BAD_PRACTICE	CT_CONSTRUCTOR_THROW	56	Medium