RFR: 8229773: Resolve permissions for code source URLs lazily
Claes Redestad
claes.redestad at oracle.com
Thu Aug 15 15:15:19 UTC 2019
Hi Daniel,
seems prudent, especially if we are to writeReplace the
underlying collection on serialization.
/Claes
On 2019-08-15 17:10, Daniel Fuchs wrote:
> Hi Claes,
>
> I wonder if initialize() should check the state of
> the readOnly() flag - and if that's true, call
> perms.setReadOnly() ?
>
> see SecureClassLoader::getProtectionDomain(..)
>
> best regards,
>
> -- daniel
More information about the security-dev
mailing list