disallow calling methods declared in java.lang.Object
via the introspection invocation code.
This commit is contained in:
parent
009e1318c3
commit
288834e1e2
1 changed files with 5 additions and 1 deletions
|
@ -263,7 +263,11 @@ class Invoker implements XmlRpcHandler {
|
|||
catch (SecurityException s_e){
|
||||
throw s_e;
|
||||
}
|
||||
|
||||
|
||||
// our policy is to make all public methods callable except the ones defined in java.lang.Object
|
||||
if (method.getDeclaringClass () == Class.forName ("java.lang.Object"))
|
||||
throw new XmlRpcException (0, "Invoker can't call methods defined in java.lang.Object");
|
||||
|
||||
// invoke
|
||||
Object returnValue = null;
|
||||
try {
|
||||
|
|
Loading…
Add table
Reference in a new issue