From 7af51501d5a70e6cdff45d7c1c804f0e820d1d3a Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Tue, 04 Aug 2026 11:53:39 +0000
Subject: [PATCH] Fix CodeQL note-severity alerts: Thread.run() calls and getters leaking internal state (#847)

---
 opendj-cli/src/main/java/com/forgerock/opendj/cli/FileBasedArgument.java |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/opendj-cli/src/main/java/com/forgerock/opendj/cli/FileBasedArgument.java b/opendj-cli/src/main/java/com/forgerock/opendj/cli/FileBasedArgument.java
index 7a8d962..924f811 100644
--- a/opendj-cli/src/main/java/com/forgerock/opendj/cli/FileBasedArgument.java
+++ b/opendj-cli/src/main/java/com/forgerock/opendj/cli/FileBasedArgument.java
@@ -13,6 +13,7 @@
  *
  * Copyright 2006-2008 Sun Microsystems, Inc.
  * Portions copyright 2014-2016 ForgeRock AS.
+ * Portions Copyright 2026 3A Systems, LLC.
  */
 package com.forgerock.opendj.cli;
 
@@ -105,6 +106,9 @@
     /**
      * Retrieves a map between the filenames specified on the command line and
      * the first lines read from those files.
+     * <p>
+     * The returned map is the live one: the tools building an equivalent command line add
+     * entries to it, so that a password read interactively is displayed as a password file.
      *
      * @return A map between the filenames specified on the command line and the
      *         first lines read from those files.

--
Gitblit v1.10.0