#vulnerable code 
                             private void addInfo(List<Object> info, final GroupOf<?> group, List<? extends Manageable> items, List<String> columns) {
		columns.add("(Actions)");
		final String groupName = group.name();

		String type = U.first(items).getManageableType();
		info.add(breadcrumb(type, groupName));

		Grid grid = grid(items)
			.columns(columns)
			.headers(columns)
			.toUri(new Mapper<Manageable, String>() {
				@Override
				public String map(Manageable handle) throws Exception {
					return Msc.uri("_manageables", handle.getClass().getSimpleName(), Msc.urlEncode(handle.id()));
				}
			})
			.pageSize(20);

		info.add(grid);
	} 
                            #location 5 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                             private void addInfo(List<Object> info, final GroupOf<?> group, List<? extends Manageable> items, List<String> columns) {
		columns.add("(Actions)");
		final String groupName = group.name();

		final String kind = group.kind();
		info.add(breadcrumb(kind, groupName));

		Grid grid = grid(items)
			.columns(columns)
			.headers(columns)
			.toUri(new Mapper<Manageable, String>() {
				@Override
				public String map(Manageable handle) throws Exception {
					return Msc.specialUri("manageables", kind, Msc.urlEncode(handle.id()));
				}
			})
			.pageSize(20);

		info.add(grid);
	}