Enable white-space in parameters for external password command -------------------------------------------------------------- Key: SECURITY-774 URL: https://issues.jboss.org/browse/SECURITY-774 Project: PicketBox Issue Type: Feature Request Security Level: Public(Everyone can see) Components: JBossSX Affects Versions: JBossSecurity_2.0.5.Final Reporter: Ivo Studensky Assignee: Peter Skopek Fix For: JBossSecurity_2.0.6.Final Attachments: SECURITY-774.patch This is a backport of SECURITY-771 to the jbosssx 2.0.x branch. The original description: The current implementation of the loading the external password by a command uses Runtime.exec() which denies to pass a parameter which contains a white-space to the command, see {{\{EXT\}}} in org.jboss.security.Util#loadPassword(String). It would be nice to provide a new implementation based on ProcessBuilder. For example, various ssh-askpass implementations requires a parameter like 'Enter passphrase for ...'. Without the ability to directly pass such a parameter customers are pushed to create a "script in the middle" which makes their application unnecessarily complicated.