Fields are not final but should be
----------------------------------
Key: MODELER-26
URL: https://issues.apache.org/jira/browse/MODELER-26
Project: Commons Modeler
Issue Type: Bug
Reporter: Philip May
A mutable static fields could be changed by malicious code or by accident from
another package.
The two following fields could be made final to avoid this vulnerability:
Class: Registry
Field: public static String MODELER_MANIFEST="/META-INF/mbeans-descriptors.xml";
Class: IntrospectionUtils
Field: public static String PATH_SEPARATOR =
System.getProperty("path.separator");
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
