Java : Determining type via class name comparison

The application determines the type of an object based on a class name. Undefined behavior and malicious code injection is possible.

An attacker can create a class of the same name with the malicious code, which will be executed by an application. The class name should not be used as an object type identifier.