Return-Path: Delivered-To: apmail-jakarta-commons-httpclient-dev-archive@www.apache.org Received: (qmail 46934 invoked from network); 27 Jul 2004 00:48:31 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 27 Jul 2004 00:48:31 -0000 Received: (qmail 675 invoked by uid 500); 27 Jul 2004 00:48:31 -0000 Delivered-To: apmail-jakarta-commons-httpclient-dev-archive@jakarta.apache.org Received: (qmail 463 invoked by uid 500); 27 Jul 2004 00:48:29 -0000 Mailing-List: contact commons-httpclient-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Commons HttpClient Project" Reply-To: "Commons HttpClient Project" Delivered-To: mailing list commons-httpclient-dev@jakarta.apache.org Received: (qmail 447 invoked by uid 99); 27 Jul 2004 00:48:29 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [140.142.32.135] (HELO mxout5.cac.washington.edu) (140.142.32.135) by apache.org (qpsmtpd/0.27.1) with ESMTP; Mon, 26 Jul 2004 17:48:27 -0700 Received: from smtp.washington.edu (smtp.washington.edu [140.142.33.9]) by mxout5.cac.washington.edu (8.13.0+UW04.06/8.13.0+UW04.06) with ESMTP id i6R0mL57005901 for ; Mon, 26 Jul 2004 17:48:22 -0700 Received: from [10.0.1.2] (pool-68-160-43-190.bos.east.verizon.net [68.160.43.190]) (authenticated bits=0) by smtp.washington.edu (8.13.0+UW04.06/8.13.0+UW04.06) with ESMTP id i6R0mKLG017162 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT) for ; Mon, 26 Jul 2004 17:48:21 -0700 Mime-Version: 1.0 (Apple Message framework v618) In-Reply-To: <41058722.8040300@laszlosystems.com> References: <41058722.8040300@laszlosystems.com> Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Michael Becke Subject: Re: running with a policy file and system properties Date: Mon, 26 Jul 2004 20:48:16 -0400 To: "Commons HttpClient Project" X-Mailer: Apple Mail (2.618) X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Hi Eric, Where specifically are you seeing the System.getProperties() calls? I'm looking at the latest code in the 2.0 branch (soon to become 2.0.1) and everything looks good to me. Mike On Jul 26, 2004, at 6:35 PM, Eric Bloch wrote: > I'm walking down the task of making a product that uses httpclient run > underneath a server with a java policy file. > > I know httpclient makes threads and sockets and I believe I have these > "under control" (will be allowed or disabled), but I've seen some code > in the 2.0 code base that does > > System.getProperties().getProperty("foo"). > > Why would you do that instead of System.getProperty("foo") (which > requires only read access to the property rather than full read/write > access to all properties) ? > > In general, in a server with a policy file, you shouldn't ever depend > on reading a property (because you might get a SecurityException). I > need to either (1) catch the SecurityException or (2) use a simpler > version of the code that can be enabled without giving access to all > system properties. > > -Eric > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: > commons-httpclient-dev-unsubscribe@jakarta.apache.org > For additional commands, e-mail: > commons-httpclient-dev-help@jakarta.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: commons-httpclient-dev-unsubscribe@jakarta.apache.org For additional commands, e-mail: commons-httpclient-dev-help@jakarta.apache.org