Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8240558

Public access for Reflection#registerFields/MethodsToFilter

    Details

      Description

      A DESCRIPTION OF THE PROBLEM :
      Currently java.base/jdk.internal.reflect.Reflection is only exported to a few java modules outside of java.base, I would like to see this expanded or utility methods added into java.lang.reflect for adding classes, fields and methods to the maps fieldFilterMap and methodFilterMap defined in jdk.internal.reflect.Reflection.

      This would allow developers to enable additional protection for internal states and help to mitigate more basic attacks against data infiltration. I do note that this is only basic protection but if implemented properly could help stop quite a few attacks using reflection, for software that uses Java archives that are loaded on runtime this could also help prevent password exfiltration by these archives, again, noting this is only rudimentary at best.


        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              webbuggrp Webbug Group
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: