non-thread-safe usage of SimpleDateFormat · Issue #1 · duosecurity/duo_client_java · GitHub
Skip to content

non-thread-safe usage of SimpleDateFormat #1

Description

@jsharper

In com.duosecurity.client.Http, there's a static instance of SimpleDateFormat, RFC_2822_DATE_FORMAT, that is used in method signRequest. SimpleDateFormat is not thread safe, and therefore this usage can cause serious issues when used in a multi-threaded app (like a j2ee web app). For example, see http://www.codefutures.com/weblog/andygrove/2007/10/simpledateformat-and-thread-safety.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions