/* |
|
* Copyright (c) 2002, 2008, Oracle and/or its affiliates. All rights reserved. |
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
|
* |
|
* This code is free software; you can redistribute it and/or modify it |
|
* under the terms of the GNU General Public License version 2 only, as |
|
* published by the Free Software Foundation. Oracle designates this |
|
* particular file as subject to the "Classpath" exception as provided |
|
* by Oracle in the LICENSE file that accompanied this code. |
|
* |
|
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
* version 2 for more details (a copy is included in the LICENSE file that |
|
* accompanied this code). |
|
* |
|
* You should have received a copy of the GNU General Public License version |
|
* 2 along with this work; if not, write to the Free Software Foundation, |
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
* |
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
|
* or visit www.oracle.com if you need additional information or have any |
|
* questions. |
|
*/ |
|
package com.sun.jmx.mbeanserver; |
|
import javax.management.loading.ClassLoaderRepository; |
|
/** |
|
* Fix security hole in ClassLoaderRepository. This class wraps |
|
* the actual ClassLoaderRepository implementation so that |
|
* only the methods from {@link javax.management.loading.ClassLoaderRepository} |
|
* can be accessed (read-only). |
|
* |
|
* @since 1.5 |
|
*/ |
|
final class SecureClassLoaderRepository |
|
implements ClassLoaderRepository { |
|
private final ClassLoaderRepository clr; |
|
/** |
|
* Creates a new secure ClassLoaderRepository wrapping an |
|
* unsecure implementation. |
|
* @param clr Unsecure {@link ClassLoaderRepository} implementation |
|
* to wrap. |
|
**/ |
|
public SecureClassLoaderRepository(ClassLoaderRepository clr) { |
|
this.clr=clr; |
|
} |
|
public final Class<?> loadClass(String className) |
|
throws ClassNotFoundException { |
|
return clr.loadClass(className); |
|
} |
|
public final Class<?> loadClassWithout(ClassLoader loader, |
|
String className) |
|
throws ClassNotFoundException { |
|
return clr.loadClassWithout(loader,className); |
|
} |
|
public final Class<?> loadClassBefore(ClassLoader loader, |
|
String className) |
|
throws ClassNotFoundException { |
|
return clr.loadClassBefore(loader,className); |
|
} |
|
} |