[cp-patches] Patch: gcjwebplugin data directory fix

Thomas Fitzsimmons fitzsim at redhat.com
Fri Jun 9 15:10:11 UTC 2006


Tom Tromey wrote:
>>>>>> "Lillian" == Lillian Angel <langel at redhat.com> writes:
> 
> Lillian> To avoid any problems with saving the whitelist file
> Lillian> (permission denied, etc), we have decided to store all the
> Lillian> plugin data in ~/.gcjwebplugin.
> 
> It looks like the saving happens in the C code.  Is this necessary?
> I was wondering if instead it would make sense to use java.util.prefs
> to store this stuff.

If the user does not trust a site then we don't even want to load the VM.  That 
way we're sure that the site can't find exploits in our security implementation. 
  So I think it's better to keep whitelist handling in C.

Tom




More information about the Classpath-patches mailing list