Restrict access to net.sourceforge.jnlp.* classes by untrusted classes.

2 files changed, 10 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 382c765..3616202 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2011-02-10  Deepak Bhole <[email protected]>
+
+	* netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java (initialize):
+	Restrict access to net.sourceforge.jnlp.* classes by untrusted
+	classes.
+
 2011-02-09  Omair Majid  <[email protected]>
 
 	* netx/net/sourceforge/jnlp/controlpanel/NetworkSettingsPanel.java
diff --git a/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java b/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java
index 2efa620..b5acb17 100644
--- a/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java
+++ b/netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java
@@ -223,6 +223,10 @@ public class JNLPRuntime {
         Authenticator.setDefault(new JNLPAuthenticator());
         ProxySelector.setDefault(new BrowserAwareProxySelector());
 
+        // Restrict access to netx classes
+        Security.setProperty("package.access", 
+                             Security.getProperty("package.access")+",net.sourceforge.jnlp");
+
         initialized = true;
 
     }