...
Ensure that untrusted code cannot invoke the affected APIs directly or indirectly (that is, via a call to an invoking method). Do not operate on tainted inputs and make sure that internal objects are not returned to untrusted code.
Exceptions
EX1: It is permissible to use APIs that do not use the immediate caller's class loader instance. For example, the three-argument {java.lang.Class.forName() method requires an explicit argument that specifies the class loader instance to use.
| Code Block |
|---|
public static Class forName(String name,
boolean initialize,
ClassLoader loader) // explicitly specify the class loader to use
throws ClassNotFoundException
|
Risk Assessment
Allowing untrusted code to load libraries using the immediate caller's class loader may seriously compromise the security of a java application.
...