Module file parse API

[Paul Sandoz]

On Jun 18, 2012, at 4:16 PM, Chris Hegarty wrote:
>> - IIRC the complete size of the jmod file is encoded in the file itself, thus after the file header has been read we can wrap everything around a CountingInputStream.
> 
> I really like this idea too, but I need to think carefully about the impact of concatenating some rogue module to another module file.

Signed modules?

Why does using a CountingInputStream over the content introduce a security issue? 

Paul.