Cynosphere/bcv-vf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Sandbox Disabled - Fixes #386 #361 #332

Browse source 
In general this seems to be causing more problems than it has solved, in the future I will attempt a more secure sandbox
This commit is contained in:
Konloch 2022-02-13 15:29:51 -06:00
parent 4771a74787
commit ab169afa37
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
src/main/java/the/bytecode/club/bytecodeviewer/util/SecurityMan.java
View file

@ -45,6 +45,9 @@ import the.bytecode.club.bytecodeviewer.resources.ExternalResources;
public class SecurityMan extends SecurityManager public class SecurityMan extends SecurityManager
{ {
private static final boolean disableExecSandbox = true;
private static final boolean disableDiskWriteSandbox = true;
private final AtomicInteger silentExec = new AtomicInteger(1); private final AtomicInteger silentExec = new AtomicInteger(1);
private boolean printing = false; private boolean printing = false;
private boolean printingPackage = false; private boolean printingPackage = false;
@ -76,6 +79,10 @@ public class SecurityMan extends SecurityManager
@Override @Override
public void checkExec(String cmd) public void checkExec(String cmd)
{ {
//This was disabled on 02-13-2022, at some point in the future I will fix the compatibility issues and re-enable it.
if(disableExecSandbox)
return;
//incoming command must contain the following or it will be automatically denied //incoming command must contain the following or it will be automatically denied
String[] execWhitelist = String[] execWhitelist =
{ {
@ -317,6 +324,10 @@ public class SecurityMan extends SecurityManager
if(printing) if(printing)
System.out.println("Writing: " + file); System.out.println("Writing: " + file);
//This was disabled on 02-13-2022, at some point in the future I will fix the compatibility issues and re-enable it.
if(disableDiskWriteSandbox)
return;
try try
{ {
//can only export as the following extensions //can only export as the following extensions