On 24/03/2017 12:01, Peter Levart wrote: > > : > > Just a reminder that System.err field is "writable" and therefore > System.setErr(PrintStream) can be used to redirect output to execute > arbitrary code... That's right, it needs to captured at startup or sent directly to stderr. -Alan