RFR [11] 8207846: Generalize the jdk.net.includeInExceptions security property

Alan Bateman Alan.Bateman at oracle.com
Fri Jul 20 12:55:23 UTC 2018


On 20/07/2018 12:38, Chris Hegarty wrote:
> JDK-8204233 added a new security property, `jdk.net.includeInExceptions`,
> to include additional, potentially security sensitive, information in
> exception detail messages in the networking area. The property accepts a
> comma separated list of values that specifies the particular type of
> extra detail information to add.
>
> :
>
>
> Full webrev:
>    http://cr.openjdk.java.net/~chegar/8207846/webrev.00/
>
This looks good. For the follow-on jarPath then I think we should look 
at moving the parsing to somewhere in java.base so that it can be used 
by other code in the module.

-Alan


More information about the security-dev mailing list