xicmiah/see — Issue #2: Class#forName can invocation possible
Author: zeldigas
Created: 2012-02-08 09:02:31+00:00
State: open

Example
```
a = 1;
fileClass = a.class.forName("java.io.File");//works!!!
```
Complete object creation is difficult because of every number by default is wrapped by number factory (to BigDecimal now), but some reflection feature can still be invoked.
It'l be better to deny class property usage or "forName" method, to block java reflection usage