ppkarwasz commented on PR #1328:
URL: https://github.com/apache/commons-lang/pull/1328#issuecomment-2527244388

   > So far, I'm still against this change.
   > 
   > These features are _designed to use reflection_, and this PR tries to turn 
some of that off.
   
   I agree. All the `reflectionX` methods have a warning:
   
   > Fields can be private, thus `AccessibleObject.setAccessible` is used to 
bypass normal access control checks. This will fail under a security manager 
unless the appropriate permissions are set.
   
   The warning might require an update, but it seems clear to me that it also 
applies to the JPMS access checks. So it is up to caller to ensure that the 
caller to ensure that the class is open to `org.apache.commons.lang3`. If the 
caller uses `testRecursive`, he must also ensure that the appropriate 
permissions are set for all the field types.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to