[rfc][icedtea-web] DeploymentPropertiesAreExposed reproducer fix

Jiri Vanek jvanek at redhat.com
Thu Sep 26 00:20:54 PDT 2013


On 09/25/2013 09:40 PM, Andrew Azores wrote:
> On 09/20/2013 03:19 AM, Jiri Vanek wrote:
>> ok, discussion have been taken :))
>>
>> now whats about original patch?
>>
>>
>>
>> Changelog:
>> * netx/net/sourceforge/jnlp/config/Defaults.java: (USER_CONFIG_HOME) made public
>> *
>> tests/reproducers/signed/DeploymentPropertiesAreExposed/testcases/DeploymentPropertiesAreExposedTest.java:
>> fixed log dir location
>>
>>
>> Another casualty of the XDG spec change ;)
>>
>> Thanks,
>>
>
> I don't know enough to comment further on what the three of you have already discussed in this
> thread. I am convinced that there should be a better method for getting access to those Defaults
> values than simply making them public, but I can't say I know what to actually do instead in order
> to keep everything secure and not leak information. In any case this reproducer being broken in the
> meantime, until that better system is determined, is not an urgent issue IMO. Perhaps it should just
> be put off for now.
>
> Thanks,
>
I'm for making it public. The field should be well protected in netx.


J.


More information about the distro-pkg-dev mailing list