public class InstantiateTransformer extends Object implements Transformer, Serializable
WARNING: from v3.2.2 onwards this class will throw an
UnsupportedOperationException
when trying to serialize or
de-serialize an instance to prevent potential remote code execution exploits.
In order to re-enable serialization support for InstantiateTransformer
the following system property can be used (via -Dproperty=true):
org.apache.commons.collections.enableUnsafeSerialization
Modifier and Type | Field and Description |
---|---|
static Transformer |
NO_ARG_INSTANCE
Singleton instance that uses the no arg constructor
|
Constructor and Description |
---|
InstantiateTransformer(Class[] paramTypes,
Object[] args)
Constructor that performs no validation.
|
Modifier and Type | Method and Description |
---|---|
static Transformer |
getInstance(Class[] paramTypes,
Object[] args)
Transformer method that performs validation.
|
Object |
transform(Object input)
Transforms the input Class object to a result by instantiation.
|
public static final Transformer NO_ARG_INSTANCE
public static Transformer getInstance(Class[] paramTypes, Object[] args)
paramTypes
- the constructor parameter typesargs
- the constructor argumentspublic Object transform(Object input)
transform
in interface Transformer
input
- the input object to transformCopyright © 2001–2015 The Apache Software Foundation. All rights reserved.