Class InstantiateFactory

  • All Implemented Interfaces:
    java.io.Serializable, Factory

    @Deprecated(since="2021-04-30")
    public class InstantiateFactory
    extends java.lang.Object
    implements Factory, java.io.Serializable
    Deprecated.
    Commons Collections 3 is in maintenance mode. Commons Collections 4 should be used instead.
    Factory implementation that creates a new object instance by reflection.

    WARNING: from v3.2.2 onwards this class will throw an UnsupportedOperationException when trying to serialize or de-serialize an instance to prevent potential remote code execution exploits.

    In order to re-enable serialization support for InstantiateTransformer the following system property can be used (via -Dproperty=true):

      org.apache.commons.collections.enableUnsafeSerialization
      
    Since:
    Commons Collections 3.0
    See Also:
    Serialized Form
    • Constructor Summary

      Constructors 
      Constructor Description
      InstantiateFactory​(java.lang.Class classToInstantiate)
      Deprecated.
      Constructor that performs no validation.
      InstantiateFactory​(java.lang.Class classToInstantiate, java.lang.Class[] paramTypes, java.lang.Object[] args)
      Deprecated.
      Constructor that performs no validation.
    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods Deprecated Methods 
      Modifier and Type Method Description
      java.lang.Object create()
      Deprecated.
      Creates an object using the stored constructor.
      static Factory getInstance​(java.lang.Class classToInstantiate, java.lang.Class[] paramTypes, java.lang.Object[] args)
      Deprecated.
      Factory method that performs validation.
      • Methods inherited from class java.lang.Object

        equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
    • Constructor Detail

      • InstantiateFactory

        public InstantiateFactory​(java.lang.Class classToInstantiate)
        Deprecated.
        Constructor that performs no validation. Use getInstance if you want that.
        Parameters:
        classToInstantiate - the class to instantiate
      • InstantiateFactory

        public InstantiateFactory​(java.lang.Class classToInstantiate,
                                  java.lang.Class[] paramTypes,
                                  java.lang.Object[] args)
        Deprecated.
        Constructor that performs no validation. Use getInstance if you want that.
        Parameters:
        classToInstantiate - the class to instantiate
        paramTypes - the constructor parameter types, not cloned
        args - the constructor arguments, not cloned
    • Method Detail

      • getInstance

        public static Factory getInstance​(java.lang.Class classToInstantiate,
                                          java.lang.Class[] paramTypes,
                                          java.lang.Object[] args)
        Deprecated.
        Factory method that performs validation.
        Parameters:
        classToInstantiate - the class to instantiate, not null
        paramTypes - the constructor parameter types
        args - the constructor arguments
        Returns:
        a new instantiate factory
      • create

        public java.lang.Object create()
        Deprecated.
        Creates an object using the stored constructor.
        Specified by:
        create in interface Factory
        Returns:
        the new object