Mailing-List: contact issues-help@commons.apache.org; run by ezmlm
Precedence: bulk
Reply-To: issues@commons.apache.org
Message-ID: <1470170669.1244626388289.JavaMail.jira@brutus>
Date: Wed, 10 Jun 2009 02:33:08 -0700 (PDT)
From: "Niall Pemberton (JIRA)" <jira@apache.org>
To: issues@commons.apache.org
Subject: [jira] Updated: (BEANUTILS-112) [beanutils] defaultTransformers is
 public in BeanMap class
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/BEANUTILS-112?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Niall Pemberton updated BEANUTILS-112:
--------------------------------------

    Fix Version/s:     (was: 1.8.0)
                   LATER THAN 1.8.0

> [beanutils] defaultTransformers is public in BeanMap class
> ----------------------------------------------------------
>
>                 Key: BEANUTILS-112
>                 URL: https://issues.apache.org/jira/browse/BEANUTILS-112
>             Project: Commons BeanUtils
>          Issue Type: Bug
>          Components: Bean-Collections
>    Affects Versions: 1.6
>         Environment: Operating System: other
> Platform: Other
>            Reporter: Simon Kitching
>            Assignee: Niall Pemberton
>             Fix For: LATER THAN 1.8.1
>
>
> The BeanMap class in the "optional" section has:
>     public static HashMap defaultTransformers = new HashMap();
> I think this is a *really* bad idea. 
> Firstly, because it's static, various parts of an application can interact in
> unexpected ways. For example, some library your code is calling might,
> unexpectedly, add a transformer to the default transformers causing surprising
> effects.
> That's even more interesting if the library (commons-collections or
> commons-beanutils) is deployed via a shared webapp in a container. In that case,
> one webapp can have side-effects on other webapps.
> And because it's a public member, there is no way to control access to this field.
> This class was in commons-collections since 1.0. It was copied into
> commons-beanutils before the 1.7.0 release, and deprecated in commons-collections.
> This class is only in the "optional" section, and is not used by the core
> beanutils code.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.