Request for review: 8016046 (process) Strict validation of input should be security manager case only [win] (original) (raw)
Alexey Utkin alexey.utkin at oracle.com
Fri Jun 7 09:02:57 UTC 2013
- Previous message: hg: jdk8/tl/jdk: 7064270: java/text/Format/DateFormat/WeekDateTest.java fails on OEL5.6 hi_IN.UTF-8
- Next message: Request for review: 8016046 (process) Strict validation of input should be security manager case only [win]
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hi, Please review the fix.
Bug description: http://bugs.sun.com/view_bug.do?bug_id=8016046 https://jbs.oracle.com/bugs/browse/JDK-8016046
The suggested fix: http://cr.openjdk.java.net/~uta/openjdk-webrevs/JDK-8016046/webrev.00/
Summary: In absence of the Security Manager the verification procedure for the command-line was restored as before the JDK-8012453 fix. That suggests the ability of inline input/output redirection, piping, simultaneous launching of several programs by single command, lost spaces and etc. The extended verification procedure is activated in presence of the Security Manager or installing to "false" the "jdk.lang.Process.allowAmbiguousCommands" Java property.
Regards, -uta
- Previous message: hg: jdk8/tl/jdk: 7064270: java/text/Format/DateFormat/WeekDateTest.java fails on OEL5.6 hi_IN.UTF-8
- Next message: Request for review: 8016046 (process) Strict validation of input should be security manager case only [win]
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]