xmlgraphics-batik-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jan Vogt (JIRA)" <j...@apache.org>
Subject [jira] [Created] (BATIK-1134) Identity theft: batik-js-1.7.jar contains org.mozilla.javascript.ScriptableObject class.
Date Wed, 16 Sep 2015 14:55:46 GMT
Jan Vogt created BATIK-1134:

             Summary: Identity theft: batik-js-1.7.jar contains org.mozilla.javascript.ScriptableObject
                 Key: BATIK-1134
                 URL: https://issues.apache.org/jira/browse/BATIK-1134
             Project: Batik
          Issue Type: Bug
          Components: Scripting
    Affects Versions: 1.7
         Environment: all
            Reporter: Jan Vogt

The batik-js-1.7.jar file indirectly required by Geoserver (http://geoserver.org/) contains
a class with the fully qualified identifier org.mozilla.javascript.ScriptableObject. But this
identifier belongs to https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java.

This is bad in many obvious ways. In my case I am using the Mozilla Rhino library for a geoserver
extension and cant control the classpath. At runtime the wrong (your) org.mozilla.javascript.ScriptableObject
is used which leads to weird crashes e.g. that the Method ScriptableObject.putConstProperty()
can not be resolved. I suggest using a correct identifier like org.apache.batik-js.ScriptableObject
instead of Mozilla's one.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: batik-dev-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-help@xmlgraphics.apache.org

View raw message