...
A compliant solution must comply with CON32CON12-J. Synchronize access to static fields that may be modified by untrusted code. However, the attacker intentionally violates CON20-J. Do not perform operations that may block while holding a lock in the untrusted code.
...