[cp-patches] Patch: gcjwebplugin data directory fix
fitzsim at redhat.com
Fri Jun 9 15:10:11 UTC 2006
Tom Tromey wrote:
>>>>>> "Lillian" == Lillian Angel <langel at redhat.com> writes:
> Lillian> To avoid any problems with saving the whitelist file
> Lillian> (permission denied, etc), we have decided to store all the
> Lillian> plugin data in ~/.gcjwebplugin.
> It looks like the saving happens in the C code. Is this necessary?
> I was wondering if instead it would make sense to use java.util.prefs
> to store this stuff.
If the user does not trust a site then we don't even want to load the VM. That
way we're sure that the site can't find exploits in our security implementation.
So I think it's better to keep whitelist handling in C.
More information about the Classpath-patches