RFR: 8319332: Security properties files inclusion [v17]
Francisco Ferrari Bihurriet
fferrari at openjdk.org
Wed Aug 7 20:09:09 UTC 2024
On Wed, 7 Aug 2024 18:20:15 GMT, Martin Balao <mbalao at openjdk.org> wrote:
>> I like this.
>>
>> Just wondering, shall we throw IAE if `getProperty("include")` is called as well? In a very rare case that someone is already using it in `java.security` file and the value happens to be an existing file name, then this will catch it when the user is trying to read it.
>
> Yes, we can do that.
Done in 580d34a63b5d3b6c7d2323413f338527db2d9acd.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/16483#discussion_r1707806998
More information about the security-dev
mailing list