JDK-8032603 : Remove sun.lang.ClassLoader.allowArraySyntax from the secure jnlp properties
  • Type: Bug
  • Component: deploy
  • Sub-Component: webstart
  • Affected Version: 9
  • Priority: P2
  • Status: Closed
  • Resolution: Not an Issue
  • Submitted: 2014-01-23
  • Updated: 2014-01-28
  • Resolved: 2014-01-28
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 9
9Resolved
Related Reports
Relates :  
JDK-6709916 - Add property sun.lang.ClassLoader.allowArraySyntax=true to the list of secure porperties
Relates :  
JDK-6516909 - (cl spec) ClassLoader.loadClass() clarification to indicate it shouldn't be used for array classes
Description
sun.lang.ClassLoader.allowArraySyntax property was added to the secure jnlp properties in JDK 5.
This property has been removed in JDK 9 (see JDK-6516909) and so it should also be removed from the secure jnlp properties.
Comments
We should not remove properties from our security list, even if it's already removed in new version of JDK. For example, we can relaunch JVM from 9/8 to 7, and if we remove the property from the security list, it will be lost for jre 7. On other hand, if the property is used in a version of the jre where it has been removed - it should have no effect, there is no problem.
28-01-2014