hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Becke <be...@u.washington.edu>
Subject Re: running with a policy file and system properties
Date Tue, 27 Jul 2004 00:48:16 GMT
Hi Eric,

Where specifically are you seeing the System.getProperties() calls?  
I'm looking at the latest code in the 2.0 branch (soon to become 2.0.1) 
and everything looks good to me.

Mike

On Jul 26, 2004, at 6:35 PM, Eric Bloch wrote:

> I'm walking down the task of making a product that uses httpclient run 
> underneath a server with a java policy file.
>
> I know httpclient makes threads and sockets and I believe I have these 
> "under control" (will be allowed or disabled), but I've seen some code 
> in the 2.0 code base that does
>
>     System.getProperties().getProperty("foo").
>
> Why would you do that instead of System.getProperty("foo") (which 
> requires only read access to the property rather than full read/write 
> access to all properties) ?
>
> In general, in a server with a policy file, you shouldn't ever depend 
> on reading a property (because you might get a SecurityException).  I 
> need to either (1) catch the SecurityException or (2) use a simpler 
> version of the code that can be enabled without giving access to all 
> system properties.
>
> -Eric
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: 
> commons-httpclient-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: 
> commons-httpclient-dev-help@jakarta.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: commons-httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-httpclient-dev-help@jakarta.apache.org


Mime
View raw message