You are viewing a plain text version of this content. The canonical link for it is here.
Posted to batik-dev@xmlgraphics.apache.org by bu...@apache.org on 2012/08/11 02:06:53 UTC
[Bug 53694] New: Override security check
https://issues.apache.org/bugzilla/show_bug.cgi?id=53694
Priority: P2
Bug ID: 53694
Assignee: batik-dev@xmlgraphics.apache.org
Summary: Override security check
Severity: normal
Classification: Unclassified
OS: Mac OS X 10.4
Reporter: clouds@riseup.net
Hardware: PC
Status: NEW
Version: 1.8
Component: Utilities
Product: Batik
ApplicationSecurityEnforcer.java, line 202, has a method (and other methods in
the file) which performs security checks. However, they are not final. As a
result, the security checks can be overridden in ways that bypass security
checks.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-help@xmlgraphics.apache.org
[Bug 53694] Override security check
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53694
Helder Magalhães <he...@gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Hardware|PC |All
OS|Mac OS X 10.4 |All
--- Comment #1 from Helder Magalhães <he...@gmail.com> ---
(In reply to comment #0)
> ApplicationSecurityEnforcer.java, line 202, has a method (and other methods
> in the file) which performs security checks. However, they are not final.
Would simply marking the methods with final fix this? Did you perform any kind
of analysis to check if are there other methods - in other source files -
involved?
Patches are welcome, as usual! ;-)
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-help@xmlgraphics.apache.org