Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8159526

Deprivilege jdk.httpserver

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P3 P3
    • 10
    • 9, 10
    • core-libs
    • b25

      jdk.httpserver should be moved to the platform class loader and granted with specific permission.

      Moving to the platform class loader is trivial:

      diff --git a/make/common/Modules.gmk b/make/common/Modules.gmk
      --- a/make/common/Modules.gmk
      +++ b/make/common/Modules.gmk
      @@ -59,7 +59,6 @@
           java.security.sasl \
           java.xml \
           java.xml.crypto \
      - jdk.httpserver \
           jdk.management \
           jdk.net \
           jdk.sctp \
      @@ -111,6 +110,7 @@
           jdk.crypto.ec \
           jdk.crypto.pkcs11 \
           jdk.dynalink \
      + jdk.httpserver \
           jdk.jsobject \
           jdk.xml.dom \
           jdk.localedata \

            vtewari Vyom Tewari
            mchung Mandy Chung (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: