wcm.ioSpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.9.8
Threshold is medium
Effort is default
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 3 | 1 | 0 | 0 |
Files
| Class | Bugs |
|---|---|
| io.wcm.maven.plugins.sling_initial_content_json_strip_comments_maven_plugin.HelpMojo | 1 |
io.wcm.maven.plugins.sling_initial_content_json_strip_comments_maven_plugin.HelpMojo
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| The use of DocumentBuilder.parse(...) (DocumentBuilder) is vulnerable to XML External Entity attacks | SECURITY | XXE_DOCUMENT | 77 | Medium |