[rfc][icedtea-web] DeploymentPropertiesAreExposed reproducer fix

Andrew Azores aazores at redhat.com
Fri Oct 4 12:07:28 PDT 2013


On 09/26/2013 02:58 PM, Andrew Azores wrote:
> On 09/26/2013 03:20 AM, Jiri Vanek wrote:
>> On 09/25/2013 09:40 PM, Andrew Azores wrote:
>>> On 09/20/2013 03:19 AM, Jiri Vanek wrote:
>>>> ok, discussion have been taken :))
>>>>
>>>> now whats about original patch?
>>>>
>>>>
>>>>
>>>> Changelog:
>>>> * netx/net/sourceforge/jnlp/config/Defaults.java: 
>>>> (USER_CONFIG_HOME) made public
>>>> *
>>>> tests/reproducers/signed/DeploymentPropertiesAreExposed/testcases/DeploymentPropertiesAreExposedTest.java: 
>>>>
>>>> fixed log dir location
>>>>
>>>>
>>>> Another casualty of the XDG spec change ;)
>>>>
>>>> Thanks,
>>>>
>>>
>>> I don't know enough to comment further on what the three of you have 
>>> already discussed in this
>>> thread. I am convinced that there should be a better method for 
>>> getting access to those Defaults
>>> values than simply making them public, but I can't say I know what 
>>> to actually do instead in order
>>> to keep everything secure and not leak information. In any case this 
>>> reproducer being broken in the
>>> meantime, until that better system is determined, is not an urgent 
>>> issue IMO. Perhaps it should just
>>> be put off for now.
>>>
>>> Thanks,
>>>
>> I'm for making it public. The field should be well protected in netx.
>>
>>
>> J.
>
> Actually, since the test is about checking that the 
> DeploymentConfiguration data is available through 
> System.getProperty()... is there any reason I can't just "abuse" the 
> DeploymentConfiguration singleton from JNLPRuntime again? Should work 
> just fine, I think still captures the "spirit" of this test, and also 
> means we can leave that constant in Defaults as default visibility.
>
> Thanks,
>
Ping?

Thanks,

-- 
Andrew A



More information about the distro-pkg-dev mailing list