search

frjaeger220 / google-guice

Automatically exported from code.google.com/p/google-guice
Apache License 2.0
0 stars 0 forks source link

Guice explodes if it doesn't have System.getProperty permissions #350

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
http://groups.google.com/group/google-
guice/browse_thread/thread/ef0c7a968f435649/ea355606690ef88c

Original issue reported on code.google.com by limpbizkit on 31 Mar 2009 at 4:21

GoogleCodeExporter commented 9 years ago 
See how JRuby solved it: http://jira.codehaus.org/browse/JRUBY-1641

Original comment by gili.tza...@gmail.com on 31 Mar 2009 at 6:07

GoogleCodeExporter commented 9 years ago 
There solution seems to be to wrap Property access with a method that allows a
default value to be returned if there is a SecurityException.

Even if you manage to get past that, does Web Start allow
ReflectPermission("suppressAccessChecks")? This will break Field.setAccessible 
and
this seems to be a bit more fundamental to Guice.

I don't know if Guice can be expected to work in an unsigned app in a sandboxed
environment, but then again, I don't know too much about java security. The 
basic
principles do seem to conflict, though.

Original comment by david.st...@gmail.com on 31 Mar 2009 at 7:27

GoogleCodeExporter commented 9 years ago 
I wrapped the property access functions, but that just paved the way for a more
fundamental permission problem. See:

http://groups.google.com/group/google-guice-dev/browse_thread/thread/42399276af2
f1fec#

Original comment by chs...@gmail.com on 23 Apr 2009 at 9:48

GoogleCodeExporter commented 9 years ago

Original comment by limpbizkit on 26 Apr 2009 at 8:29

GoogleCodeExporter commented 9 years ago

Original comment by sberlin on 22 Feb 2011 at 1:52

GoogleCodeExporter commented 9 years ago 
Candidate patch, tested locally

Original comment by mccu...@gmail.com on 29 Jul 2012 at 7:11

Attachments: