Explore
1-11 of 11
Avoid mapping to multiple HTTP request methods
Map to one HTTP request method for best practices
- info
- java
- Spring
- framework specific
- web
- Spring Web
- quality
Missing annotation in controller class
This class is missing a @Controller or @RestController annotation
- error
- java
- Spring
- framework specific
- web
- Spring Web
- quality
Non-annotated controller public method
Public methods within a controller class should be treated as request handlers, therefore should be annotated as such. If you really believe this method should not be exposed as a Rest endpoint, please consider extracting it into an external Component class and call it from inside this controller.
- warning
- java
- Spring
- framework specific
- web
- Spring Web
- quality
Session configuration: Cookies: Configure Secure flag
Prevent a cookie being sent over unencrypted HTTP by setting the Secure flag to true
- error
- java
- Spring
- security
- framework specific
- web
- Spring Web
- OWASP Top 10
Session configuration: Cookies: Set HttpOnly flag to true
Prevent client-side scripts from accessing the cookie by setting the HttpOnly flag to true
- error
- java
- Spring
- security
- framework specific
- web
- Spring Web
- OWASP Top 10
Session configuration: Cookies: Set Secure flag to true
Prevent a cookie being sent over unencrypted HTTP by setting the Secure flag to true
- error
- java
- Spring
- security
- framework specific
- web
- Spring Web
- OWASP Top 10
Session management: Avoid CSRF: Use narrow mapping for state-changing methods
Non-specified RequestMapping method will map to any HTTP request
- error
- java
- Spring
- security
- framework specific
- web
- Spring Web
- CSRF
Suffix Matching: UseRegisteredSuffixPatternMatch set to false to prevent suffix pattern matching
Prevent suffix pattern matching by setting UseRegisteredSuffixPatternMatch to false
- warning
- java
- Spring
- security
- framework specific
- web
- Spring Web
Suffix Matching: UseSuffixPatternMatch set to false to prevent suffix pattern matching
Prevent suffix pattern matching by setting UseSuffixPatternMatching to false
- warning
- java
- Spring
- security
- framework specific
- web
- Spring Web
Use composed requestmapping annotations
Improve readability by using Spring's composed annotations
- info
- java
- Spring
- framework specific
- web
- Spring Web
- quality
Use requestMapping on public methods
RequestMapping should not be used on non-public methods
- warning
- java
- Spring
- framework specific
- web
- Spring Web
- quality