[rfc][icedtea-web] DeploymentPropertiesAreExposed reproducer fix

Andrew Azores aazores at redhat.com
Wed Sep 25 12:40:46 PDT 2013

On 09/20/2013 03:19 AM, Jiri Vanek wrote:
> ok, discussion have been taken :))
> now whats about original patch?
> Changelog:
> * netx/net/sourceforge/jnlp/config/Defaults.java: (USER_CONFIG_HOME) 
> made public
> * 
> tests/reproducers/signed/DeploymentPropertiesAreExposed/testcases/DeploymentPropertiesAreExposedTest.java: 
> fixed log dir location
> Another casualty of the XDG spec change ;)
> Thanks,

I don't know enough to comment further on what the three of you have 
already discussed in this thread. I am convinced that there should be a 
better method for getting access to those Defaults values than simply 
making them public, but I can't say I know what to actually do instead 
in order to keep everything secure and not leak information. In any case 
this reproducer being broken in the meantime, until that better system 
is determined, is not an urgent issue IMO. Perhaps it should just be put 
off for now.


Andrew A

More information about the distro-pkg-dev mailing list