archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-09-20 02:54:35 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8208691: Tighten up jdk.includeInExceptions security property

Browse source 
Add stronger warning on usage and add test to check that property is not set

Reviewed-by: alanb, rriggs
This commit is contained in:
Sean Mullan 2018-08-07 10:29:01 -04:00
parent 0919d6d626
commit ac3d4a6722
2 changed files with 28 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/java.base/share/conf/security/java.security
View file

@ -1070,6 +1070,11 @@ jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep
# case-insensitive. Leading and trailing whitespaces, surrounding each value,
# are ignored. Unknown values are ignored.
#
# NOTE: Use caution before setting this property. Setting this property
# exposes sensitive information in Exceptions, which could, for example,
# propagate to untrusted code or be emitted in stack traces that are
# inadvertently disclosed and made accessible over a public network.
#
# The categories are:
#
# hostInfo - IOExceptions thrown by java.net.Socket and the socket types in the