Help with Security

[Chirag Sharma]

"Hi
I have created a real time java code compiler at http://www.guru99.com/try-java-editor.html Although I have checked all security loopholes ... do you experts see any major security leak that I need to care of?"

 

[Daniel Pitts]

"Hi
I have created a real time java code compiler at http://www.guru99.com/try-java-editor.html Although I have checked all security loopholes ... do you experts see any major security leak that I need to care of?"

Nope, you still fail. You are approaching this entirely wrong. If you
try to black-list things you will miss something and open a serious
vulnerability.

 

[Daniel Pitts]

Nope, you still fail. You are approaching this entirely wrong. If you
try to black-list things you will miss something and open a serious
vulnerability.

To clarify. I am still able to access any and all classes you thought
you blocked. A string filter will not save you ever, because I can
bypass it easily.

 

[Roedy Green]

Nit pick. Check spelling of separate.

 

[Roedy Green]

Nope, you still fail. You are approaching this entirely wrong. If you
try to black-list things you will miss something and open a serious
vulnerability.

Could you handle this with a policy file and the usual java security?