2023-05-03 11:06:20 +02:00
|
|
|
== Why is this an issue?
|
|
|
|
|
|
2021-04-28 16:49:39 +02:00
|
|
|
According to the EJB specification, EJB's:
|
|
|
|
|
|
|
|
|
|
____
|
|
|
|
|
...must not attempt to create a class loader; obtain the current class loader; set the context class loader...
|
|
|
|
|
____
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This rule raises an issue each time an EJB obtains a class loader.
|
|
|
|
|
|
2021-04-28 18:08:03 +02:00
|
|
|
|
2023-05-03 11:06:20 +02:00
|
|
|
=== Noncompliant code example
|
2021-04-28 16:49:39 +02:00
|
|
|
|
2022-02-04 17:28:24 +01:00
|
|
|
[source,java]
|
2021-04-28 16:49:39 +02:00
|
|
|
----
|
|
|
|
|
ClassLoader loader = this.getClass().getClassLoader(); // Noncompliant
|
|
|
|
|
ClassLoader loader = new MyClassLoader(); // Noncompliant
|
|
|
|
|
----
|
|
|
|
|
|
2021-04-28 18:08:03 +02:00
|
|
|
|
2023-05-03 11:06:20 +02:00
|
|
|
== Resources
|
2021-04-28 16:49:39 +02:00
|
|
|
|
2022-04-07 08:53:59 -05:00
|
|
|
* https://cwe.mitre.org/data/definitions/578[MITRE, CWE-578] - EJB Bad Practices: Use of Class Loader
|
2021-04-28 18:08:03 +02:00
|
|
|
|
2021-09-20 15:38:42 +02:00
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
|
|
|
|
|
|
'''
|
|
|
|
|
== Implementation Specification
|
|
|
|
|
(visible only on this page)
|
|
|
|
|
|
|
|
|
|
include::message.adoc[]
|
|
|
|
|
|
|
|
|
|
endif::env-github,rspecator-view[]
|
