Jan Vogt created BATIK-1134:
-------------------------------

             Summary: Identity theft: batik-js-1.7.jar contains 
org.mozilla.javascript.ScriptableObject class.
                 Key: BATIK-1134
                 URL: https://issues.apache.org/jira/browse/BATIK-1134
             Project: Batik
          Issue Type: Bug
          Components: Scripting
    Affects Versions: 1.7
         Environment: all
            Reporter: Jan Vogt


The batik-js-1.7.jar file indirectly required by Geoserver 
(http://geoserver.org/) contains a class with the fully qualified identifier 
org.mozilla.javascript.ScriptableObject. But this identifier belongs to 
https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java.
 
This is bad in many obvious ways. In my case I am using the Mozilla Rhino 
library for a geoserver extension and cant control the classpath. At runtime 
the wrong (your) org.mozilla.javascript.ScriptableObject is used which leads to 
weird crashes e.g. that the Method ScriptableObject.putConstProperty() can not 
be resolved. I suggest using a correct identifier like 
org.apache.batik-js.ScriptableObject instead of Mozilla's one.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscr...@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-h...@xmlgraphics.apache.org

Reply via email to