Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.java.programmer > #27472
| Path | csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.glorb.com!peer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!fx20.iad.POSTED!not-for-mail |
|---|---|
| From | Daniel Pitts <newsgroup.nospam@virtualinfinity.net> |
| User-Agent | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 |
| MIME-Version | 1.0 |
| Newsgroups | comp.lang.java.programmer |
| Subject | Re: Help with Security |
| References | <eca8f3e6-fbfe-4d8e-8fca-f9cc2908fb55@googlegroups.com> <4_QIu.388098$Wm1.175556@fx17.iad> |
| In-Reply-To | <4_QIu.388098$Wm1.175556@fx17.iad> |
| Content-Type | text/plain; charset=ISO-8859-1; format=flowed |
| Content-Transfer-Encoding | 7bit |
| Lines | 16 |
| Message-ID | <aORIu.418536$_n7.225783@fx20.iad> (permalink) |
| X-Complaints-To | abuse@newsrazor.net |
| NNTP-Posting-Date | Thu, 06 Feb 2014 19:56:54 UTC |
| Date | Thu, 06 Feb 2014 11:56:58 -0800 |
| X-Received-Bytes | 1422 |
| X-Received-Body-CRC | 3142927098 |
| Xref | csiph.com comp.lang.java.programmer:27472 |
Show key headers only | View raw
On 2/6/14 11:01 AM, Daniel Pitts wrote: > On 2/6/14 12:10 AM, Chirag Sharma wrote: >> "Hi >> I have created a real time java code compiler at >> http://www.guru99.com/try-java-editor.html Although I have checked all >> security loopholes ... do you experts see any major security leak that >> I need to care of?" >> > > Nope, you still fail. You are approaching this entirely wrong. If you > try to black-list things you will miss something and open a serious > vulnerability. To clarify. I am still able to access any and all classes you thought you blocked. A string filter will not save you ever, because I can bypass it easily.
Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: Help with Security Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2014-02-06 11:01 -0800 Re: Help with Security Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2014-02-06 11:56 -0800 Re: Help with Security Roedy Green <see_website@mindprod.com.invalid> - 2014-02-07 01:56 -0800 Re: Help with Security Roedy Green <see_website@mindprod.com.invalid> - 2014-02-08 10:16 -0800
csiph-web