RFR: 8290368: Introduce LDAP and RMI protocol-specific object factory filters to JNDI implementation [v3]

Roger Riggs rriggs at openjdk.org
Thu Oct 13 13:58:19 UTC 2022


On Thu, 13 Oct 2022 12:34:47 GMT, Jaikiran Pai <jpai at openjdk.org> wrote:

>> Aleksei Efimov has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Change checkInput to be the global filter centric
>
> src/java.base/share/conf/security/java.security line 1408:
> 
>> 1406: # references bound to LDAP contexts. The factory class named by the reference instance will
>> 1407: # be matched against this filter. The filter property supports pattern-based filter syntax
>> 1408: # with the same format as jdk.serialFilter.
> 
> Hello Aleksei, as far as I can see the `jdk.serialFilter` allows for additional details like `limits` (example: `maxdepth=value`). Should we note here that this JNDI specific property will ignore those configurations?

Yes, worth noting, but I would say they are "unused", not ignored.

-------------

PR: https://git.openjdk.org/jdk/pull/10578



More information about the security-dev mailing list