[jboss-dev-forums] [Design of AOP on JBoss (Aspects/JBoss)] - Re: Reimplementing ClassPools for AS

adrian@jboss.org do-not-reply at jboss.com
Tue Jan 13 10:05:41 EST 2009


"alesj" wrote : 
  | I guess it doesn't do any harm ...

Yes it does potential harm because you can get access to classes and resources
from other classes that you shouldn't be allowed to.

e.g. in your example you can load unexported classes from fcl which you can't do from cl

That's why you need the RuntimePermission("getClassLoader") like you do
for class.getClassLoader().

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4201417#4201417

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4201417



More information about the jboss-dev-forums mailing list