[forge-issues] [JBoss JIRA] (FORGE-1358) Prevent Forge Addons to Issue System.exit(0)

George Gastaldi (JIRA) issues at jboss.org
Wed Dec 11 12:54:33 EST 2013


    [ https://issues.jboss.org/browse/FORGE-1358?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12930500#comment-12930500 ] 

George Gastaldi commented on FORGE-1358:
----------------------------------------

I don't think this can be solved in Forge itself. The Eclipse VM (as well as the shell UI) should start with a {{java.policy}} parameter to enable a Security Manager.

More information: http://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html
                
> Prevent Forge Addons to Issue System.exit(0) 
> ---------------------------------------------
>
>                 Key: FORGE-1358
>                 URL: https://issues.jboss.org/browse/FORGE-1358
>             Project: Forge
>          Issue Type: Feature Request
>          Components: Furnace (Container)
>    Affects Versions: 2.0.0.Beta3
>            Reporter: Koen Aers
>
> Right now it's possible to write a rogue add-on that while executing calls 'System.exit(0)'. If Forge 2 is embedded in Eclipse (or in any other application), this brings down the VM of the hosting application. This should be avoided.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the forge-issues mailing list