3 ms·
> It's impossible to do in the general case if your packaging schema allows arbitrary code execution Java's type system: ClassLoaders plus SecurityManager was
by blibble 4y ago
> It's impossible to do in the general case if your packaging schema allows arbitrary code execution
Java's type system: ClassLoaders plus SecurityManager was impossible?
that's literally how Java applets worked, enforced through the type system
https://docstore.mik.ua/orelly/java-ent/security/ch03_01.htm https://docstore.mik.ua/orelly/java-ent/security/ch03_01.htm
yes, SecurityManager was a poor implementation for many reasons, but it's definitely not "impossible" to sandbox downloaded code from the network while having it interact with other existing code, you can do it with typing alone