[ https://issues.apache.org/jira/browse/OFBIZ-9631?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Brohl closed OFBIZ-9631. -------------------------------- Resolution: Implemented Fix Version/s: Upcoming Release Thanks Dennis, your patch is in trunk r1811426. > [FB] Package org.apache.ofbiz.common.period > ------------------------------------------- > > Key: OFBIZ-9631 > URL: https://issues.apache.org/jira/browse/OFBIZ-9631 > Project: OFBiz > Issue Type: Sub-task > Components: framework > Affects Versions: Trunk > Reporter: Dennis Balkir > Assignee: Michael Brohl > Priority: Minor > Fix For: Upcoming Release > > Attachments: OFBIZ-9631_org.apache.ofbiz.common.period_bugfixes.patch > > > - PeriodWorker.java:34, MS_SHOULD_BE_FINAL > MS: org.apache.ofbiz.common.period.PeriodWorker.module isn't final but should > be > This static field public but not final, and could be changed by malicious > code or by accident from another package. The field could be made final to > avoid this vulnerability. -- This message was sent by Atlassian JIRA (v6.4.14#64029)