test/script/sandbox/safeprops.js

Thu, 05 Sep 2019 18:59:46 +0800

author
aoqi
date
Thu, 05 Sep 2019 18:59:46 +0800
changeset 2493
2093c4a7abf0
parent 1482
58791cd01bc9
permissions
-rw-r--r--

Merge

aoqi@0 1 /*
sundar@1482 2 * Copyright (c) 2014, Oracle and/or its affiliates. All rights reserved.
aoqi@0 3 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
aoqi@0 4 *
aoqi@0 5 * This code is free software; you can redistribute it and/or modify it
aoqi@0 6 * under the terms of the GNU General Public License version 2 only, as
aoqi@0 7 * published by the Free Software Foundation.
aoqi@0 8 *
aoqi@0 9 * This code is distributed in the hope that it will be useful, but WITHOUT
aoqi@0 10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
aoqi@0 11 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
aoqi@0 12 * version 2 for more details (a copy is included in the LICENSE file that
aoqi@0 13 * accompanied this code).
aoqi@0 14 *
aoqi@0 15 * You should have received a copy of the GNU General Public License version
aoqi@0 16 * 2 along with this work; if not, write to the Free Software Foundation,
aoqi@0 17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
aoqi@0 18 *
aoqi@0 19 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
aoqi@0 20 * or visit www.oracle.com if you need additional information or have any
aoqi@0 21 * questions.
aoqi@0 22 */
aoqi@0 23
aoqi@0 24 /**
aoqi@0 25 * Try to access System properties safe to read for any code.
aoqi@0 26 * No security exception expected.
aoqi@0 27 *
aoqi@0 28 * @test
aoqi@0 29 * @security
aoqi@0 30 * @run
aoqi@0 31 * @bug 8033924: Default permissions are not given for eval code
aoqi@0 32 */
aoqi@0 33
aoqi@0 34 var propNames = [
aoqi@0 35 "java.version",
aoqi@0 36 "java.vendor",
aoqi@0 37 "java.vendor.url",
aoqi@0 38 "java.class.version",
aoqi@0 39 "os.name",
aoqi@0 40 "os.version",
aoqi@0 41 "os.arch",
aoqi@0 42 "file.separator",
aoqi@0 43 "path.separator",
aoqi@0 44 "line.separator",
aoqi@0 45 "java.specification.version",
aoqi@0 46 "java.specification.vendor",
aoqi@0 47 "java.specification.name",
aoqi@0 48 "java.vm.specification.version",
aoqi@0 49 "java.vm.specification.vendor",
aoqi@0 50 "java.vm.specification.name",
aoqi@0 51 "java.vm.version",
aoqi@0 52 "java.vm.vendor",
aoqi@0 53 "java.vm.name"
aoqi@0 54 ];
aoqi@0 55
aoqi@0 56 // no security exception expected
aoqi@0 57 for (var p in propNames) {
aoqi@0 58 java.lang.System.getProperty(propNames[p]);
aoqi@0 59 }
aoqi@0 60
aoqi@0 61 // no security exception expected
aoqi@0 62 for (var p in propNames) {
aoqi@0 63 var name = propNames[p];
aoqi@0 64 eval('java.lang.System.getProperty(name)');
aoqi@0 65 }

mercurial