RFR: 8348986: Improve coverage of enhanced exception messages [v4]
Michael McMahon
michaelm at openjdk.org
Wed Apr 9 10:04:47 UTC 2025
> Hi,
>
> Enhanced exception messages are designed to hide sensitive information such as hostnames, IP
> addresses from exception message strings, unless the enhanced mode for the specific category
> has been explicitly enabled. Enhanced exceptions were first introduced in 8204233 in JDK 11 and
> updated in 8207846.
>
> This PR aims to increase the coverage of enhanced exception messages in the networking code.
> A limited number of exceptions are already hidden (restricted) by default. The new categories and
> exceptions in this PR will be restricted on an opt-in basis, ie. the default mode will be enhanced
> (while preserving the existing behavior).
>
> The mechanism is controlled by the security/system property "jdk.includeInExceptions" which takes as value
> a comma separated list of category names, which identify groups of exceptions where the exception
> message may be enhanced. Any category not listed is "restricted" which means that potentially
> sensitive information (such as hostnames, IP addresses, user identities) are excluded from the message text.
>
> The changes to the java.security conf file describe the exact changes in terms of the categories now
> supported and any changes in behavior.
>
> Thanks,
> Michael
Michael McMahon has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 17 commits:
- Merge branch 'master' into 8348986-exceptions
- Merge branch 'master' into 8348986-exceptions
- Apply suggestions from code review
from turbanoff review
Co-authored-by: Andrey Turbanov <turbanoff at gmail.com>
- doc + copyright update
- remove file added by mistake
- whitespace
- moved test
- Merge branch 'master' into 8348986-exceptions
- update
- update
- ... and 7 more: https://git.openjdk.org/jdk/compare/f7fa05f5...f5501d18
-------------
Changes: https://git.openjdk.org/jdk/pull/23929/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=23929&range=03
Stats: 1000 lines in 42 files changed: 767 ins; 104 del; 129 mod
Patch: https://git.openjdk.org/jdk/pull/23929.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/23929/head:pull/23929
PR: https://git.openjdk.org/jdk/pull/23929
More information about the net-dev
mailing list