Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #27472
| From | Daniel Pitts <newsgroup.nospam@virtualinfinity.net> |
|---|---|
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: Help with Security |
| References | <eca8f3e6-fbfe-4d8e-8fca-f9cc2908fb55@googlegroups.com> <4_QIu.388098$Wm1.175556@fx17.iad> |
| Message-ID | <aORIu.418536$_n7.225783@fx20.iad> (permalink) |
| Date | 2014-02-06 11:56 -0800 |
On 2/6/14 11:01 AM, Daniel Pitts wrote: > On 2/6/14 12:10 AM, Chirag Sharma wrote: >> "Hi >> I have created a real time java code compiler at >> http://www.guru99.com/try-java-editor.html Although I have checked all >> security loopholes ... do you experts see any major security leak that >> I need to care of?" >> > > Nope, you still fail. You are approaching this entirely wrong. If you > try to black-list things you will miss something and open a serious > vulnerability. To clarify. I am still able to access any and all classes you thought you blocked. A string filter will not save you ever, because I can bypass it easily.
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: Help with Security Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2014-02-06 11:01 -0800 Re: Help with Security Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2014-02-06 11:56 -0800 Re: Help with Security Roedy Green <see_website@mindprod.com.invalid> - 2014-02-07 01:56 -0800 Re: Help with Security Roedy Green <see_website@mindprod.com.invalid> - 2014-02-08 10:16 -0800
csiph-web