You are viewing a plain text version of this content. The canonical link for it is here.
Posted to batik-dev@xmlgraphics.apache.org by "Simon Steiner (Jira)" <ji...@apache.org> on 2022/09/07 08:21:00 UTC
[jira] [Updated] (BATIK-1335) Jar url should be blocked by DefaultScriptSecurity
[ https://issues.apache.org/jira/browse/BATIK-1335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Simon Steiner updated BATIK-1335:
---------------------------------
Description:
JPEGTranscoder t = new JPEGTranscoder();
t.addTranscodingHint(JPEGTranscoder.KEY_EXECUTE_ONLOAD, Boolean.TRUE);
t.addTranscodingHint(JPEGTranscoder.KEY_ALLOWED_SCRIPT_TYPES, "application/java-archive,");
FileInputStream stream = new FileInputStream("test.svg");
TranscoderInput input = new TranscoderInput(stream);
FileOutputStream fos = new FileOutputStream("out.jpg");
TranscoderOutput output = new TranscoderOutput(fos);
t.transcode(input, output);
fos.close();
> Jar url should be blocked by DefaultScriptSecurity
> --------------------------------------------------
>
> Key: BATIK-1335
> URL: https://issues.apache.org/jira/browse/BATIK-1335
> Project: Batik
> Issue Type: Bug
> Reporter: Simon Steiner
> Assignee: Simon Steiner
> Priority: Major
>
> JPEGTranscoder t = new JPEGTranscoder();
> t.addTranscodingHint(JPEGTranscoder.KEY_EXECUTE_ONLOAD, Boolean.TRUE);
> t.addTranscodingHint(JPEGTranscoder.KEY_ALLOWED_SCRIPT_TYPES, "application/java-archive,");
> FileInputStream stream = new FileInputStream("test.svg");
> TranscoderInput input = new TranscoderInput(stream);
> FileOutputStream fos = new FileOutputStream("out.jpg");
> TranscoderOutput output = new TranscoderOutput(fos);
> t.transcode(input, output);
> fos.close();
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-help@xmlgraphics.apache.org