sahvx655-wq opened a new pull request, #384:
URL: https://github.com/apache/commons-validator/pull/384

   reading the number validators, validate of double and float passes the 
parsed value straight through processParsedValue without checking it is finite. 
NumberFormat recognises the locale NaN and infinity symbols, so 
validate("NaN"), validate("∞") and validate("-∞") return NaN/infinity and 
isValid returns true. a NaN that validates then silently defeats every 
isInRange/minValue/maxValue check, since NaN compares false against everything. 
reject non-finite results in both validators.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to