6 Mar
2007
6 Mar
'07
10:57 p.m.
On 3/6/07, THOMAS, BRIAN M (ATTSI) <bt0008(a)att.com> wrote:
Not since yesterday (1.0 beta5 release). Up to beta4, yes, you could have
done it.
brain[sic]
It really is forbidden to instantiate classes in
Velocity. This is a
bug security hole.
By this I presume that you mean that I shouldn't even have been able to
use java.lang.Class.newInstance(); is this correct?
--
http://purl.org/net/sergiu