[ https://issues.apache.org/jira/browse/OFBIZ-9631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dennis Balkir updated OFBIZ-9631: --------------------------------- Attachment: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch - changed the parameter to final and private, to prevent possible vulnerability through external code changing > [FB] Package org.apache.ofbiz.common.period > ------------------------------------------- > > Key: OFBIZ-9631 > URL: https://issues.apache.org/jira/browse/OFBIZ-9631 > Project: OFBiz > Issue Type: Sub-task > Components: framework > Affects Versions: Trunk > Reporter: Dennis Balkir > Priority: Minor > Attachments: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch > > > - PeriodWorker.java:34, MS_SHOULD_BE_FINAL > MS: org.apache.ofbiz.common.period.PeriodWorker.module isn't final but should > be > This static field public but not final, and could be changed by malicious > code or by accident from another package. The field could be made final to > avoid this vulnerability. -- This message was sent by Atlassian JIRA (v6.4.14#64029)