Hi Joe, Joe Walnes wrote:
> On Tue, Jan 7, 2014 at 5:58 PM, Jörg Schaible > <[email protected]> wrote: [snip] >> Since I already proposed an upcoming 1.5.0 to require Java 6 and 1.4.x to >> stay compatible, the best compromise is to turn whitelisting on for 1.5.x >> and port the mechanism back into the 1.4.x branch, without activating it >> by default. Since the code base is currently not yet really different, it >> should be easy. >> >> So anyone who relies on 1.4.x to be a drop-in replacement can do so and >> will >> at least not suffer from the EventHandler (unless he has such instances >> in his object graph) and for 1.5.x there might be more changes anyway. >> >> Sounds reasonable? > > Sounds excellent! :) I've committed now a version to trunk that contains the new security framework. You may have a look (or at least to the diff). It allows currently anything by default, but that will change after merging the changes to the branch. I'll have to write some docs, too. Cheers, Jörg --------------------------------------------------------------------- To unsubscribe from this list, please visit: http://xircles.codehaus.org/manage_email
