Class InstantiateTransformer

  • All Implemented Interfaces:
    Serializable, Transformer

    @Deprecated(since="2021-04-30")
    public class InstantiateTransformer
    extends Object
    implements Transformer, Serializable
    Deprecated.
    Commons Collections 3 is in maintenance mode. Commons Collections 4 should be used instead.
    Transformer implementation that creates a new object instance by reflection.

    WARNING: from v3.2.2 onwards this class will throw an UnsupportedOperationException when trying to serialize or de-serialize an instance to prevent potential remote code execution exploits.

    In order to re-enable serialization support for InstantiateTransformer the following system property can be used (via -Dproperty=true):

      org.apache.commons.collections.enableUnsafeSerialization
      
    Since:
    Commons Collections 3.0
    See Also:
    Serialized Form
    • Field Detail

      • NO_ARG_INSTANCE

        public static final Transformer NO_ARG_INSTANCE
        Deprecated.
        Singleton instance that uses the no arg constructor
    • Constructor Detail

      • InstantiateTransformer

        public InstantiateTransformer​(Class[] paramTypes,
                                      Object[] args)
        Deprecated.
        Constructor that performs no validation. Use getInstance if you want that.
        Parameters:
        paramTypes - the constructor parameter types, not cloned
        args - the constructor arguments, not cloned
    • Method Detail

      • getInstance

        public static Transformer getInstance​(Class[] paramTypes,
                                              Object[] args)
        Deprecated.
        Transformer method that performs validation.
        Parameters:
        paramTypes - the constructor parameter types
        args - the constructor arguments
        Returns:
        an instantiate transformer
      • transform

        public Object transform​(Object input)
        Deprecated.
        Transforms the input Class object to a result by instantiation.
        Specified by:
        transform in interface Transformer
        Parameters:
        input - the input object to transform
        Returns:
        the transformed result