RFR [11] 8207846: Generalize the jdk.net.includeInExceptions security property

Sean Mullan sean.mullan at oracle.com
Fri Jul 20 17:07:51 UTC 2018


On 7/20/18 11:08 AM, Chris Hegarty wrote:
> This is ambiguous, and needs to be clarified. Surely, it is
> better to use the same wording as the serial filter:
> 
>   "Whitespace is significant and is considered part of the value."

Kind of on the fence on that one. If this were a general property/value 
format, I would agree, but these values are fixed and not potentially 
complicated expressions.

For example, does this mean:

jdk.includeInExceptions=hostInfo,jarInfo

and

jdk.includeInExceptions=hostInfo, jarInfo

are different? And I assume the latter " jarInfo" would be ignored?

If you are strongly in favor of this, I would highly recommend logging a 
warning when there is an unknown value, otherwise typos and such would 
be hard to detect (although this doesn't necessarily need to be in the 
specification).

--Sean


More information about the security-dev mailing list