"alesj" wrote : &quot;adrian(a)jboss.org&quot; wrote : | | That's why you need the RuntimePermission("getClassLoader") like you do | | for class.getClassLoader(). | But I guess if you have this permission, then you can bend the import/export rules? | Of course. If you've got enough rope you can hang yourself. ;-) | Class<?> exportedClass = myClassLoader.loadClass("clazz.exported.from.elsewhere"); | ClassLoader exportingClassLoader = exportedClass.getClassLoader(); // PERMISSION CHECK HERE | Class<?> notExported = exportingClassLoader.load("non.exported.class"); | View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4201425#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...