yawlfoundation / yawl

Yet Another Workflow Language
http://www.yawlfoundation.org
GNU Lesser General Public License v3.0
88 stars 35 forks source link

WorkQueueGatewayClient not thread-safe #617

Closed fmannhardt closed 4 years ago

fmannhardt commented 6 years ago

The WorkQueueGatewayClient is not thread-safe. Many methods use a shared 'params' field for not apparent reason. This may lead to information from other requests leaking through, which is both a security concern & not correct.

The easiest solution would be to remove the 'params' field and create a new map for every request as already done in a lot of methods, which use 'prepareParamMap'.

adamsmj commented 4 years ago

class is now thread safe