This content has been marked as final.
Show 1 reply
-
1. Fragments do not have a seperate ProtectionDomain
thomas.diesler Jan 10, 2011 8:54 AM (in response to thomas.diesler)(02:50:36 PM) dmlloyd: tdiesler: resource roots already have their own protection domains.
(02:50:43 PM) dmlloyd: so it should already be correct
(02:51:11 PM) dmlloyd: that way, someone can't gain privileges by sticking their JAR alongside a privileged module's JAR
(02:52:25 PM) dmlloyd: tdiesler, if you're defining your own resource loader, the relevant method call is ClassSpec.setCodeSource()