refactor(core): fix minor security findings

[evebrnd]

PR Description

What this PR Provides

• Describe in short sentences the goal of the PR. Use lists.
• If the PR is linked to an ADR, please provide the link.

Review

The reviewer must double-check these points:

• The reviewer has tested the feature
• The reviewer has reviewed the implementation of the feature
• The documentation has been updated

How to test

• The initial state: what should be the status of the system before testing
  (for example, ensure the data xxx exists in idp-back to be able to test the feature)
• What and how to test: steps to perform to test the feature
  (for example, go to page xxx, fill the xxx field and click the 'send' button)
• Expected results: what should be observed for success or failure
  (for example, there is a link in the database between component X and component Y.
  You can retrieve the information with a GET request to the API)

Breaking changes

N/A

[github-code-quality]

Code coverage overview

Languages: Java

Java / code-coverage/jacoco

main 1e7741b	refactor/security-an... a373058	+/-
91%	91%	0%

View coverage of the 7 most impacted files.

File	main 1e7741b	refactor/security-an... a373058	+/-
com/decathlon/i...JsltEngine.java	100%	85%	-15%
com/decathlon/i...aphService.java	90%	90%	0%
com/decathlon/i...ityService.java	98%	98%	0%
com/decathlon/i...onstraints.java	0%	0%	0%
com/decathlon/i...onCriteria.java	100%	100%	0%
com/decathlon/i...Controller.java	100%	100%	0%
com/decathlon/i...ineAdapter.java	81%	82%	+1%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

---

_{Updated October 16, 2026 15:52 UTC}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
86.5% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud