Jan Vogt created BATIK-1134:
-------------------------------
Summary: Identity theft: batik-js-1.7.jar contains
org.mozilla.javascript.ScriptableObject class.
Key: BATIK-1134
URL: https://issues.apache.org/jira/browse/BATIK-1134
Project: Batik
Issue Type: Bug
Components: Scripting
Affects Versions: 1.7
Environment: all
Reporter: Jan Vogt
The batik-js-1.7.jar file indirectly required by Geoserver
(http://geoserver.org/) contains a class with the fully qualified identifier
org.mozilla.javascript.ScriptableObject. But this identifier belongs to
https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java.
This is bad in many obvious ways. In my case I am using the Mozilla Rhino
library for a geoserver extension and cant control the classpath. At runtime
the wrong (your) org.mozilla.javascript.ScriptableObject is used which leads to
weird crashes e.g. that the Method ScriptableObject.putConstProperty() can not
be resolved. I suggest using a correct identifier like
org.apache.batik-js.ScriptableObject instead of Mozilla's one.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
