Community
Participate
Working Groups
I noticed that in some places we keep states in servlets or handlers used by servlets. For instance: GitIndexHandlerV1 has a private Repository db field, which is set by #handleRequest and reuse later. Since our servlets along with handlers are singletons this is a potential threat.
Fixed with 555fd0d6cb28ba9d4dcdadf05ae489455db6b1a2.