Request for review: 8016046 (process) Strict validation of input should be security manager case only [win]
alexey.utkin at oracle.com
Fri Jun 7 09:02:57 UTC 2013
Please review the fix.
The suggested fix:
In absence of the Security Manager the verification procedure for
the command-line was restored as before the JDK-8012453 fix. That
suggests the ability of inline input/output redirection, piping,
simultaneous launching of several programs by single command, lost
spaces and etc.
The extended verification procedure is activated in presence of the
Security Manager or installing to "false" the
"jdk.lang.Process.allowAmbiguousCommands" Java property.
More information about the core-libs-dev