I'll try.
If you create a completely new object in the method, and place it in the request context, it will be threadsafe:
If you use an existing object which is also present in one of the unsafe contexts (application or session), it will not be threadsafe:
If you use an existing object which is a static (class) or member (instance) variable in the
servlet class, it will not be threadsafe:
Is that any clearer?