author | duke |
Wed, 05 Jul 2017 19:01:51 +0200 | |
changeset 18460 | 05ae280384ab |
parent 16522 | d643e3ee819c |
permissions | -rw-r--r-- |
16226
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
1 |
# We would like to avoid references from anywhere outside nashorn |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
2 |
# to codegen, IR and parser packages, in particular script generated classes. |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
3 |
# We ensure that by overriding "package.access" security property. |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
4 |
|
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
5 |
# The following "package.access" value was copied from default java.security |
16522 | 6 |
# of jre/lib/security and appended with nashorn sensitive packages. |
16226
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
7 |
|
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
8 |
# |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
9 |
# List of comma-separated packages that start with or equal this string |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
10 |
# will cause a security exception to be thrown when |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
11 |
# passed to checkPackageAccess unless the |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
12 |
# corresponding RuntimePermission ("accessClassInPackage."+package) has |
0e4f37e6cc40
8007915: Nashorn IR, codegen, parser packages and Context instance should be inaccessible to user code
sundar
parents:
diff
changeset
|
13 |
# been granted. |
16522 | 14 |
package.access=sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,jdk.internal.,jdk.nashorn.internal.,jdk.nashorn.tools. |