Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Omit spotbugs CT_CONSTRUCTOR_THROWS visitor #108

Merged

Conversation

MarkEWaite
Copy link
Contributor

From jenkinsci/plugin-pom#869 (comment)

Discussion in spotbugs/spotbugs#2695
https://wiki.sei.cmu.edu/confluence/display/java/OBJ11-J.+Be+wary+of+letting+constructors+throw+exceptions
seems to relate to libraries used with SecurityManager which is dead
and certainly does not apply to Jenkins; we do not expect untrusted code
to be running inside the controller JVM, and it does not seem plausible
that finalizer abuse would happen by accident.

From jenkinsci/plugin-pom#869 (comment)

> Discussion in spotbugs/spotbugs#2695
> https://wiki.sei.cmu.edu/confluence/display/java/OBJ11-J.+Be+wary+of+letting+constructors+throw+exceptions
> seems to relate to libraries used with SecurityManager which is dead
> and certainly does not apply to Jenkins; we do not expect untrusted code
> to be running inside the controller JVM, and it does not seem plausible
> that finalizer abuse would happen by accident.
@MarkEWaite MarkEWaite merged commit 1addec7 into jenkinsci:master Dec 21, 2023
14 checks passed
@MarkEWaite MarkEWaite deleted the omit-constructor-throws-visitor branch December 21, 2023 11:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant