Details
-
Enhancement
-
Resolution: Fixed
-
P4
-
None
-
None
Description
The filters maintained by core reflection are a useful band aid to avoid leaking Field or Method objects to untrusted code. The filtering mechanism can be improved to filter out all fields from highly security sensitive classes such as Class, ClassLoader and some of the java.lang.reflect classes.
Attachments
Issue Links
- csr for
-
JDK-8210522 Improve filtering for classes with security sensitive fields
-
- Closed
-
- relates to
-
JDK-8214696 Module class should be filtered by core reflection
-
- Resolved
-