I know it is a bad (security) practice to call overridable methods from an object constructor in Java. However, for example, if the constructor has to initialize some data, it seems reasonable to call the respective setter method so that I don't copy code. The setters are public and not final. Is there any standard way of dealing with this, like declaring private setter methods, that the public ones call? To illustrate, here is some code:
class A {
private double x,y;
private privateSetX(double x1) { x=x1; }
private privateSetY(double y1) { y=y1; }
public A() { privateSetX(0); privateSetY(0); }
public setX(double x1) { privateSetX(x1); }
public setY(double y1) { privateSetY(y1); }
};
解决方案
If you really want to do this, create a secondary private setter method that is called by both the constructor and the public setter.
在Java中,从构造器中直接调用可覆盖的setter方法可能存在安全隐患。为避免这种做法,可以创建私有的setter辅助方法,由构造器和公共setter共同调用。这样既能保持代码复用,又能确保安全性。示例代码展示了如何实现这一最佳实践。
444

被折叠的 条评论
为什么被折叠?



