[jira] [Created] (BATIK-1134) Identity theft: batik-js-1.7.jar contains org.mozilla.javascript.ScriptableObject class.

["Jan Vogt (JIRA)" <ji...@apache.org>]

Jan Vogt created BATIK-1134:
-------------------------------

             Summary: Identity theft: batik-js-1.7.jar contains org.mozilla.javascript.ScriptableObject class.
                 Key: BATIK-1134
                 URL: https://issues.apache.org/jira/browse/BATIK-1134
             Project: Batik
          Issue Type: Bug
          Components: Scripting
    Affects Versions: 1.7
         Environment: all
            Reporter: Jan Vogt


The batik-js-1.7.jar file indirectly required by Geoserver (http://geoserver.org/) contains a class with the fully qualified identifier org.mozilla.javascript.ScriptableObject. But this identifier belongs to https://github.com/mozilla/rhino/blob/master/src/org/mozilla/javascript/ScriptableObject.java. 
This is bad in many obvious ways. In my case I am using the Mozilla Rhino library for a geoserver extension and cant control the classpath. At runtime the wrong (your) org.mozilla.javascript.ScriptableObject is used which leads to weird crashes e.g. that the Method ScriptableObject.putConstProperty() can not be resolved. I suggest using a correct identifier like org.apache.batik-js.ScriptableObject instead of Mozilla's one.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-help@xmlgraphics.apache.org