RFR: 8319332: Security properties files inclusion [v17]

Francisco Ferrari Bihurriet fferrari at openjdk.org
Wed Aug 7 20:09:09 UTC 2024


On Wed, 7 Aug 2024 18:20:15 GMT, Martin Balao <mbalao at openjdk.org> wrote:

>> I like this.
>> 
>> Just wondering, shall we throw IAE if `getProperty("include")` is called as well? In a very rare case that someone is already using it in `java.security` file and the value happens to be an existing file name, then this will catch it when the user is trying to read it.
>
> Yes, we can do that.

Done in 580d34a63b5d3b6c7d2323413f338527db2d9acd.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/16483#discussion_r1707806998



More information about the security-dev mailing list