commons-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Philip May (JIRA)" <j...@apache.org>
Subject [jira] Created: (MODELER-26) Fields are not final but should be
Date Tue, 19 Feb 2008 15:38:43 GMT
Fields are not final but should be
----------------------------------

                 Key: MODELER-26
                 URL: https://issues.apache.org/jira/browse/MODELER-26
             Project: Commons Modeler
          Issue Type: Bug
            Reporter: Philip May


A mutable static fields could be changed by malicious code or by accident from another package.

The two following fields could be made final to avoid this vulnerability:
Class: Registry
Field: public static String MODELER_MANIFEST="/META-INF/mbeans-descriptors.xml";

Class: IntrospectionUtils
Field: public static String PATH_SEPARATOR = System.getProperty("path.separator");



-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message