public final class JAXBPermission extends BasicPermission
JAXBPermission
包含一个名字(也被称为“目标名称”)但没有行为列表;你可以有命名的许可,或者你不
目标的名字是JAXB许可名称(见下文)。
下表列出了所有可能的JAXBPermission
目标名称,并为每个提供了一个描述什么权限允许和给代码权限的风险的讨论。
Permission Target Name | What the Permission Allows | Risks of Allowing this Permission |
---|---|---|
setDatatypeConverter | Allows the code to set VM-wide DatatypeConverterInterface via the setDatatypeConverter method that all the methods on DatatypeConverter uses. |
Malicious code can set DatatypeConverterInterface , which has VM-wide singleton semantics, before a genuine JAXB implementation sets one. This allows malicious code to gain access to objects that it may otherwise not have access to, such as Frame.getFrames() that belongs to another application running in the same JVM. |
BasicPermission
,
Permission
,
Permissions
,
PermissionCollection
,
SecurityManager
,
Serialized Form
Constructor and Description |
---|
JAXBPermission(String name)
创建具有指定名称的新jaxbpermission。
|
equals, getActions, hashCode, implies, newPermissionCollection
checkGuard, getName, toString
public JAXBPermission(String name)
name
的jaxbpermission名称。作为2.2只“setdatatypeconverter”的定义。
Submit a bug or feature
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2014, Oracle and/or its affiliates. All rights reserved.