[jboss-dev-forums] [Design of AOP on JBoss (Aspects/JBoss)] - Re: Reimplementing ClassPools for AS

[adrian@jboss.org]

"alesj" wrote : "adrian at jboss.org" wrote : 
  |   | That's why you need the RuntimePermission("getClassLoader") like you do
  |   | for class.getClassLoader().
  | But I guess if you have this permission, then you can bend the import/export rules?
  | 

Of course. If you've got enough rope you can hang yourself. ;-)


  | Class<?> exportedClass = myClassLoader.loadClass("clazz.exported.from.elsewhere");
  | ClassLoader exportingClassLoader = exportedClass.getClassLoader(); // PERMISSION CHECK HERE
  | Class<?> notExported = exportingClassLoader.load("non.exported.class");
  | 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4201425#4201425

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4201425