disallow calling methods declared in java.lang.Object
via the introspection invocation code.
This commit is contained in:
parent
009e1318c3
commit
288834e1e2
1 changed files with 5 additions and 1 deletions
|
@ -263,7 +263,11 @@ class Invoker implements XmlRpcHandler {
|
||||||
catch (SecurityException s_e){
|
catch (SecurityException s_e){
|
||||||
throw s_e;
|
throw s_e;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// our policy is to make all public methods callable except the ones defined in java.lang.Object
|
||||||
|
if (method.getDeclaringClass () == Class.forName ("java.lang.Object"))
|
||||||
|
throw new XmlRpcException (0, "Invoker can't call methods defined in java.lang.Object");
|
||||||
|
|
||||||
// invoke
|
// invoke
|
||||||
Object returnValue = null;
|
Object returnValue = null;
|
||||||
try {
|
try {
|
||||||
|
|
Loading…
Add table
Reference in a new issue