A solution to the final classes problem

[Tom Eugelink]

On 2012-09-02 07:33, Randahl Fink Isaksen wrote:
> I do not disagree with you – maybe some things need to be final. I just think you cast too wide a net, that is all.
>


Which again leads me to repost my question; Swing has no final classes what so ever, you can extend any component (even JFileChooser http://docs.oracle.com/javase/6/docs/api/javax/swing/JFileChooser.html). Swing also is the most used UI framework, so there is enough incentive. Is there any example of how this has ever been misused as a security leak? Or perhaps an example of how this could be used as a security leak, which would have been prevented had the classes been final (and is not easily done some other way)?

Tom