rzo1 opened a new pull request, #1521:
URL: https://github.com/apache/opennlp/pull/1521

   GenericModelReader and GenericModelWriter now resolve their reader and 
writer classes via a new ExtensionLoader.loadExtensionClass, which applies the 
same allowed package prefix check as instantiateExtension before the class is 
looked up and loads it without initializing it. Today the class names come from 
the closed AlgorithmType enum, so this keeps both call sites safe independent 
of that enum. Tests cover the round trip for the built-in model types and that 
a class outside the allowed packages is rejected without being initialized.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to