Details
-
Type:
Bug
-
Status:
Closed
-
Priority:
Critical
-
Resolution: Fixed
-
Affects Version/s: 1.1.1
-
Fix Version/s: 1.2-M4
-
Component/s: None
-
Labels:None
Description
If class B extends A and A has declared some transients in the static transients property, class B must also declare these or the GrailsDomainClass exposes the transient properties in the persistentProperties list - and presumably also serializes these.
This is a potential security problem as transients are often used for values such as credit card numbers or passwords, but are not actually saved to the database. This could be causing information leakage for people who have not checked the schema and produced in the DB.