xmlgraphics-batik-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jan Vogt (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (BATIK-1134) Identity theft: batik-js-1.7.jar contains org.mozilla.javascript.ScriptableObject class.
Date Wed, 16 Sep 2015 15:02:48 GMT

     [ https://issues.apache.org/jira/browse/BATIK-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Jan Vogt updated BATIK-1134:
----------------------------
    Description: 
The batik-js-1.7.jar file indirectly required by Geoserver (http://geoserver.org/) contains
a class with the fully qualified identifier org.mozilla.javascript.ScriptableObject. But this
identifier belongs to https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java.

In my case this leads to serious problems: I am using the Mozilla Rhino library for a geoserver
extension and cant control the classpath. At runtime the wrong (your) org.mozilla.javascript.ScriptableObject
is used which leads to weird crashes e.g. that the Method ScriptableObject.putConstProperty()
can not be resolved. My suggested fix would be to use a conventional identifier like org.apache.batik-js.ScriptableObject
that uses your namespace instead of Mozilla's one.

  was:
The batik-js-1.7.jar file indirectly required by Geoserver (http://geoserver.org/) contains
a class with the fully qualified identifier org.mozilla.javascript.ScriptableObject. But this
identifier belongs to https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java.

This is bad in many obvious ways. In my case I am using the Mozilla Rhino library for a geoserver
extension and cant control the classpath. At runtime the wrong (your) org.mozilla.javascript.ScriptableObject
is used which leads to weird crashes e.g. that the Method ScriptableObject.putConstProperty()
can not be resolved. I suggest using a correct identifier like org.apache.batik-js.ScriptableObject
instead of Mozilla's one.


> Identity theft: batik-js-1.7.jar contains org.mozilla.javascript.ScriptableObject class.
> ----------------------------------------------------------------------------------------
>
>                 Key: BATIK-1134
>                 URL: https://issues.apache.org/jira/browse/BATIK-1134
>             Project: Batik
>          Issue Type: Bug
>          Components: Scripting
>    Affects Versions: 1.7
>         Environment: all
>            Reporter: Jan Vogt
>
> The batik-js-1.7.jar file indirectly required by Geoserver (http://geoserver.org/) contains
a class with the fully qualified identifier org.mozilla.javascript.ScriptableObject. But this
identifier belongs to https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java.

> In my case this leads to serious problems: I am using the Mozilla Rhino library for a
geoserver extension and cant control the classpath. At runtime the wrong (your) org.mozilla.javascript.ScriptableObject
is used which leads to weird crashes e.g. that the Method ScriptableObject.putConstProperty()
can not be resolved. My suggested fix would be to use a conventional identifier like org.apache.batik-js.ScriptableObject
that uses your namespace instead of Mozilla's one.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-help@xmlgraphics.apache.org


Mime
View raw message