Re: RFR: 8338536: Permanently disable remote code downloading in JNDI [v4]

2024-11-20 Thread Aleksei Efimov
On Wed, 20 Nov 2024 14:13:59 GMT, Daniel Fuchs wrote: >> Aleksei Efimov has updated the pull request incrementally with two >> additional commits since the last revision: >> >> - Docs and comments update >> - Revert VersionHelper.createThread removal > > src/jdk.naming.rmi/share/classes/modul

Re: RFR: 8338536: Permanently disable remote code downloading in JNDI [v4]

2024-11-20 Thread Daniel Fuchs
On Wed, 20 Nov 2024 13:06:57 GMT, Aleksei Efimov wrote: >> This PR permanently disable remote code downloading in JNDI/LDAP and >> JNDI/RMI JDK providers, and contains the following changes: >> - The following two properties are removed: >> - `com.sun.jndi.ldap.object.trustURLCodebase` >>

Re: RFR: 8338536: Permanently disable remote code downloading in JNDI [v4]

2024-11-20 Thread Aleksei Efimov
> This PR permanently disable remote code downloading in JNDI/LDAP and JNDI/RMI > JDK providers, and contains the following changes: > - The following two properties are removed: > - `com.sun.jndi.ldap.object.trustURLCodebase` > - `com.sun.jndi.rmi.object.trustURLCodebase` > - JNDIs object