RFR: 8338536: Permanently disable remote code downloading in JNDI [v3]

[Roger Riggs]

On Wed, 20 Nov 2024 11:38:35 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> src/java.naming/share/classes/com/sun/naming/internal/VersionHelper.java line 163:
>> 
>>> 161:     InputStream getJavaHomeConfStream(String filename) {
>>> 162:         try {
>>> 163:             String javahome = System.getProperty("java.home");
>> 
>> StaticProperty.javaHome() is available as a stable value for the property.
>
> Good point too - but that would require am additional qualified export of `jdk.internal.util` from `java.base` to `java.naming`. I'm not sure it's worth it. I mean - keeping qualified exports as few as possible is also a worthy goal.

Never mind, I forgot this isn't in java.base.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/22154#discussion_r1850406385