RFR: 8319332: Security properties files inclusion [v17]
Martin Balao
mbalao at openjdk.org
Wed Aug 7 18:25:37 UTC 2024
On Wed, 7 Aug 2024 16:06:03 GMT, Weijun Wang <weijun at openjdk.org> wrote:
>> Proposed a change here: https://github.com/openjdk/jdk/pull/16483/commits/530bd81c2a73a39f00c6ba9524752f30600cd04d
>
> I like this.
>
> Just wondering, shall we throw IAE if `getProperty("include")` is called as well? In a very rare case that someone is already using it in `java.security` file and the value happens to be an existing file name, then this will catch it when the user is trying to read it.
Yes, we can do that.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/16483#discussion_r1707609559
More information about the security-dev
mailing list