2 This static field public but not final, and
3 could be changed by malicious code or
4 by accident from another package.
5 The field could be made final to avoid
6 this vulnerability. However, the static initializer contains more than one write
7 to the field, so doing so will require some refactoring.