Mercurial > hg > release > icedtea-web-1.0
changeset 98:cc8c67ed615e
Restrict access to net.sourceforge.jnlp.* classes by untrusted classes.
author | Deepak Bhole <dbhole@redhat.com> |
---|---|
date | Thu, 10 Feb 2011 11:19:53 -0500 |
parents | 74f0a9c6e509 |
children | af8d359d6daa |
files | ChangeLog netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java |
diffstat | 2 files changed, 10 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/ChangeLog Thu Feb 10 11:22:59 2011 -0500 +++ b/ChangeLog Thu Feb 10 11:19:53 2011 -0500 @@ -1,3 +1,9 @@ +2011-02-10 Deepak Bhole <dbhole@redhat.com> + + * netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java (initialize): + Restrict access to net.sourceforge.jnlp.* classes by untrusted + classes. + 2011-02-10 Deepak Bhole <dbhole@redhat.com> * NEWS: Add 1.0.1
--- a/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java Thu Feb 10 11:22:59 2011 -0500 +++ b/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java Thu Feb 10 11:19:53 2011 -0500 @@ -219,6 +219,10 @@ Authenticator.setDefault(new JNLPAuthenticator()); ProxySelector.setDefault(new JNLPProxySelector()); + // Restrict access to netx classes + Security.setProperty("package.access", + Security.getProperty("package.access")+",net.sourceforge.jnlp"); + initialized = true; }