Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 4337c29476df8b34b4b85d2f592a266ae59d250e https://github.com/xwiki/xwiki-platform/commit/4337c29476df8b34b4b85d2f592a2... Author: ciaens <[email protected]> Date: 2026-10-15 (Thu, 15 Oct 2026) Changed paths: M xwiki-platform-core/xwiki-platform-csrf/pom.xml M xwiki-platform-core/xwiki-platform-csrf/src/main/java/org/xwiki/csrf/internal/DefaultCSRFToken.java Log Message: ----------- [Misc] Fix the Sonar issue S3077 in DefaultCSRFToken (#6915) * Read the derived-token secret through a memoized supplier (Guava `Suppliers.memoize`, as suggested in the review) instead of a volatile byte array (java:S3077, reported on the new code of XWIKI-25243); a failure to read the key is not memoized. Co-authored-by: Claude <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications