4 ms·
> And since Java Security Sandbox doesn't work on Java 18 without an additional console flag - it executes code without any sandboxing on your host machine. Wh
by blinkingled 4y ago
> And since Java Security Sandbox doesn't work on Java 18 without an additional console flag - it executes code without any sandboxing on your host machine.
Whoever changed Java 18 to indirectly cause sandboxes to stop working - do they bear some responsibility here? Don't know the details of this particular case but have been burnt before by defaults changing to insecure before.
- vips7L 4y agoNo, they don't have responsibility here. The security manager is deprecated and will throw UnsupportedOperationException when trying to set it in Java 18. This means the developers of JEB willfully ignored this.
- UncleMeat 4y agoNo. SecurityManager has been a defunct feature forever and its removal was widely communicated.