[forge-issues] [JBoss JIRA] (FORGE-1358) Prevent Forge Addons to Issue System.exit(0)
George Gastaldi (JIRA)
issues at jboss.org
Wed Dec 11 12:54:33 EST 2013
[ https://issues.jboss.org/browse/FORGE-1358?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12930500#comment-12930500 ]
George Gastaldi commented on FORGE-1358:
----------------------------------------
I don't think this can be solved in Forge itself. The Eclipse VM (as well as the shell UI) should start with a {{java.policy}} parameter to enable a Security Manager.
More information: http://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html
> Prevent Forge Addons to Issue System.exit(0)
> ---------------------------------------------
>
> Key: FORGE-1358
> URL: https://issues.jboss.org/browse/FORGE-1358
> Project: Forge
> Issue Type: Feature Request
> Components: Furnace (Container)
> Affects Versions: 2.0.0.Beta3
> Reporter: Koen Aers
>
> Right now it's possible to write a rogue add-on that while executing calls 'System.exit(0)'. If Forge 2 is embedded in Eclipse (or in any other application), this brings down the VM of the hosting application. This should be avoided.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the forge-issues
mailing list