Arnout Engelen fe85a7d9e7 Avoid instantiating arbitrary classes ... This PR avoids the use of `Class#newInstance`, which is deprecated in Java 9. In particular, previously you could set the `config.strategy` system to an arbitrary class that would get instantiated even if it was not a subclass of `ConfigLoadingStrategy`. This is now checked before instantiating the class. The previous behavior could arguably be considered a security concern when an attacker has write access to system properties, though in such a scenario there are likely many other ways to load arbitrary code.		2022-02-01 14:58:34 +01:00
..
src	Avoid instantiating arbitrary classes	2022-02-01 14:58:34 +01:00
.gitignore	Rewrite substitution resolver, use explicit immutable ResolveSource	2014-07-10 12:58:58 -04:00
checkstyle-config.xml	fix again XML	2019-03-21 10:54:31 +00:00
checkstyle-suppressions.xml	fix again XML	2019-03-21 10:54:31 +00:00