Mercurial > hg > release > icedtea-web-1.0

changeset 98:cc8c67ed615e

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Restrict access to net.sourceforge.jnlp.* classes by untrusted classes.
author Deepak Bhole <dbhole@redhat.com>
date Thu, 10 Feb 2011 11:19:53 -0500
parents 74f0a9c6e509
children af8d359d6daa
files ChangeLog netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java
diffstat 2 files changed, 10 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Thu Feb 10 11:22:59 2011 -0500
+++ b/ChangeLog	Thu Feb 10 11:19:53 2011 -0500
@@ -1,3 +1,9 @@
+2011-02-10  Deepak Bhole <dbhole@redhat.com>
+
+	* netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java (initialize):
+	Restrict access to net.sourceforge.jnlp.* classes by untrusted
+	classes.
+
 2011-02-10  Deepak Bhole <dbhole@redhat.com>
 
 	* NEWS: Add 1.0.1
--- a/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java	Thu Feb 10 11:22:59 2011 -0500
+++ b/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java	Thu Feb 10 11:19:53 2011 -0500
@@ -219,6 +219,10 @@
         Authenticator.setDefault(new JNLPAuthenticator());
         ProxySelector.setDefault(new JNLPProxySelector());
 
+        // Restrict access to netx classes
+        Security.setProperty("package.access", 
+                             Security.getProperty("package.access")+",net.sourceforge.jnlp");
+
         initialized = true;
 
     }