public class InstantiateTransformer<T> extends java.lang.Object implements Transformer<java.lang.Class<? extends T>,T>, java.io.Serializable
WARNING: This class will throw an
UnsupportedOperationException
when trying to serialize or
de-serialize an instance to prevent potential remote code execution exploits.
In order to re-enable serialization support for InstantiateTransformer
the following system property can be used (via -Dproperty=true):
org.apache.commons.collections.enableUnsafeSerialization
Modifier and Type | Field and Description |
---|---|
private java.lang.Object[] |
iArgs
The constructor arguments
|
private java.lang.Class<?>[] |
iParamTypes
The constructor parameter types
|
private static Transformer |
NO_ARG_INSTANCE
Singleton instance that uses the no arg constructor
|
private static long |
serialVersionUID
The serial version
|
Modifier | Constructor and Description |
---|---|
private |
InstantiateTransformer()
Constructor for no arg instance.
|
|
InstantiateTransformer(java.lang.Class<?>[] paramTypes,
java.lang.Object[] args)
Constructor that performs no validation.
|
Modifier and Type | Method and Description |
---|---|
static <T> Transformer<java.lang.Class<? extends T>,T> |
instantiateTransformer()
Get a typed no-arg instance.
|
static <T> Transformer<java.lang.Class<? extends T>,T> |
instantiateTransformer(java.lang.Class<?>[] paramTypes,
java.lang.Object[] args)
Transformer method that performs validation.
|
private void |
readObject(java.io.ObjectInputStream is)
Overrides the default readObject implementation to prevent
de-serialization (see COLLECTIONS-580).
|
T |
transform(java.lang.Class<? extends T> input)
Transforms the input Class object to a result by instantiation.
|
private void |
writeObject(java.io.ObjectOutputStream os)
Overrides the default writeObject implementation to prevent
serialization (see COLLECTIONS-580).
|
private static final long serialVersionUID
private static final Transformer NO_ARG_INSTANCE
private final java.lang.Class<?>[] iParamTypes
private final java.lang.Object[] iArgs
private InstantiateTransformer()
public InstantiateTransformer(java.lang.Class<?>[] paramTypes, java.lang.Object[] args)
instantiateTransformer
if you want that.
Note: from 4.0, the input parameters will be cloned
paramTypes
- the constructor parameter typesargs
- the constructor argumentspublic static <T> Transformer<java.lang.Class<? extends T>,T> instantiateTransformer()
T
- the type of the objects to be createdpublic static <T> Transformer<java.lang.Class<? extends T>,T> instantiateTransformer(java.lang.Class<?>[] paramTypes, java.lang.Object[] args)
T
- the type of the objects to be createdparamTypes
- the constructor parameter typesargs
- the constructor argumentspublic T transform(java.lang.Class<? extends T> input)
transform
in interface Transformer<java.lang.Class<? extends T>,T>
input
- the input object to transformprivate void writeObject(java.io.ObjectOutputStream os) throws java.io.IOException
java.io.IOException
private void readObject(java.io.ObjectInputStream is) throws java.lang.ClassNotFoundException, java.io.IOException
java.lang.ClassNotFoundException
java.io.IOException