RFR: 8348986: Improve coverage of enhanced exception messages [v15]
Michael McMahon
michaelm at openjdk.org
Fri May 30 10:32:57 UTC 2025
On Fri, 30 May 2025 09:39:36 GMT, Michael McMahon <michaelm at openjdk.org> wrote:
>> Hi,
>>
>> Enhanced exception messages are designed to hide sensitive information such as hostnames, IP
>> addresses from exception message strings, unless the enhanced mode for the specific category
>> has been explicitly enabled. Enhanced exceptions were first introduced in 8204233 in JDK 11 and
>> updated in 8207846.
>>
>> This PR aims to increase the coverage of enhanced exception messages in the networking code.
>> A limited number of exceptions are already hidden (restricted) by default. The new categories and
>> exceptions in this PR will be restricted on an opt-in basis, ie. the default mode will be enhanced
>> (while preserving the existing behavior).
>>
>> The mechanism is controlled by the security/system property "jdk.includeInExceptions" which takes as value
>> a comma separated list of category names, which identify groups of exceptions where the exception
>> message may be enhanced. Any category not listed is "restricted" which means that potentially
>> sensitive information (such as hostnames, IP addresses, user identities) are excluded from the message text.
>>
>> The changes to the java.security conf file describe the exact changes in terms of the categories now
>> supported and any changes in behavior.
>>
>> Thanks,
>> Michael
>
> Michael McMahon has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 34 commits:
>
> - typo in suggestions and other issues
> - Merge branch 'master' into 8348986-exceptions
> - Apply suggestions from code review
>
> Co-authored-by: Daniel Fuchs <67001856+dfuch at users.noreply.github.com>
> - Additional callsites identified by Mark S.
> - Merge branch 'master' into 8348986-exceptions
> - Merge branch 'master' into 8348986-exceptions
> - Merge branch 'master' into 8348986-exceptions
> - update
> - reduced number of new categories
> - Merge branch 'master' into 8348986-exceptions
> - ... and 24 more: https://git.openjdk.org/jdk/compare/e33eeeea...462ee011
The last change to java.net.HostPortrange (renaming the constructor parameter) has caused a problem. The parameter is hiding a field of the same name. I need to fix that now.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/23929#issuecomment-2921954327
More information about the net-dev
mailing list