SEC-1578: ThreadLocalSecurityContextHolderStrategy.clearContext() should use ThreadLocal.remove() #1819

Closed
spring-issuemaster opened this Issue Sep 23, 2010 · 0 comments

2 participants

@spring-issuemaster

Rob Winch (Migrated from SEC-1578) said:

It appears that calling ThreadLocal.set(null) causes some memory problems that can be fixed as of JDK 1.5 using ThreadLocal.remove() It may be wise to update ThreadLocalSecurityContextHolderStrategy.clearContext() to use remove now that Spring Security relies on JDK 1.5. This is also consistent with other portions of Spring https://jira.springsource.org/browse/SPR-7441

@spring-issuemaster spring-issuemaster added this to the 3.1.0.M2 milestone Feb 5, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment