Check if tokens have been revoked first in DefaultEncryptingOAuthData… · apache/cxf@2e2895f

Triggered via pull request July 28, 2026 16:07

coheigea

opened #3347

Status Success

Total duration 2h 32m 4s

Artifacts –

codeql-analysis.yml

on: pull_request

10 warnings

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L342

java.lang.SecurityManager in java.lang has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L330

java.security.AccessController in java.security has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L328

getSecurityManager() in java.lang.System has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L328

java.lang.SecurityManager in java.lang has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L86

java.security.AccessController in java.security has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L73

java.security.AccessController in java.security has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L57

java.security.AccessController in java.security has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/common/classloader/ClassLoaderUtils.java#L39

getSecurityManager() in java.lang.System has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/bus/extension/ExtensionManagerImpl.java#L165

java.security.AccessController in java.security has been deprecated and marked for removal

Analyze: core/src/main/java/org/apache/cxf/attachment/AttachmentUtil.java#L403

deprecated item is not annotated with @deprecated