occurs in regular rest endpoints and in cockpit web apps endpoints

Hi StephenOTT,

Thank you for reporting this.

The @class field is generated by the Jackson @JsonTypeInfo annotation (in the parent StatisticsResultDto). It is used to extract type information for JSON serialization and deserialization, to preserve information about the actual class of the Jackson object.

As the ActivityStatisticsResultDto is only provided in responses, the @class field is not necessary.

Furthermore, this field shouldn't be visible, as the default behavior is to exclude it from the response.

I will forward this ticket for scheduling.

Best,
Nikola

Steps to reproduce this issue:

1. Deploy and start an instance of the testProcess.bpmn.
2. The job related to the Script Task will produce an incident.
3. Call https://localhost:8080/engine-rest/process-definition/GenUTs:4:fe3819d8-aaa4-11eb-9c96-7603ee83ccb9/statistics?incidents=true in your browser or Postman.
4. You will see a @class field in the JSON Response.

Hi StephenOTT,

thanks for making us aware of this issue. We consider this a valid bug.

However, we do not see any unexpected behavior triggered by this other than unnecessary information being exposed in the result. We therefore consider this issue to have a low priority and will not put it on the roadmap as of now.

Feel free to disagree with us on that and let us know if you have a different opinion.

Best,
Tobias

We are closing this ticket as part of our backlog grooming. Reasons:

• We did not receive sufficient evidence that this ticket is important