[weld-issues] [JBoss JIRA] Commented: (WELD-361) Preventing reflection misuse

Pete Muir (JIRA) jira-events at lists.jboss.org
Wed Dec 15 10:30:18 EST 2010


    [ https://issues.jboss.org/browse/WELD-361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12570413#comment-12570413 ] 

Pete Muir commented on WELD-361:
--------------------------------

This issue is largely implemented however we need a full audit of the solution to ensure it doesn't allow privilege escalation. It's possible we can get this help from Oracle, if not Anil and team have offered to help out.

> Preventing reflection misuse
> ----------------------------
>
>                 Key: WELD-361
>                 URL: https://issues.jboss.org/browse/WELD-361
>             Project: Weld
>          Issue Type: Feature Request
>          Components: Reflection layer
>    Affects Versions: 1.0.0.GA
>            Reporter: Nicklas Karlsson
>            Assignee: Nicklas Karlsson
>             Fix For: 1.2.0.Beta1
>
>
> Prevent misuse of Weld reflection privilege elevation (either through using reflection util classes directly or through other API/SPI)

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the weld-issues mailing list