Inspectopedia Help

'public static' collection field

Reports modifiable public static Collection fields.

Even though they are often used to store collections of constant values, these fields nonetheless represent a security hazard, as their contents may be modified even if the field is declared as final.

Example:

public static final List<String> EVENTS = new ArrayList<>();

Locating this inspection

By ID

Can be used to locate inspection in e.g. Qodana configuration files, where you can quickly enable or disable it, or adjust its settings.

PublicStaticCollectionField
Via Settings dialog

Path to the inspection settings via IntelliJ Platform IDE Settings dialog, when you need to adjust inspection settings directly from your IDE.

Settings or Preferences | Editor | Inspections | Java | Security

Use the table in the Options section to specify methods returning unmodifiable collections. public static collection fields initialized with these methods will not be reported.

Inspection options

Here you can find the description of settings available for the 'public static' collection field inspection, and the reference of their default values.

Availability

By default bundled with

IntelliJ IDEA 2024.1, Qodana for JVM 2024.1,

Can be installed with plugin

Java, 241.18072

Last modified: 18 June 2024