matthiasblaesing commented on issue #3748:
URL: https://github.com/apache/netbeans/issues/3748#issuecomment-1069236521


   > > Maybe this conf could be added by default in netbean distribution ?
   > 
   > Doesn't that amount to disabling a security feature of the JDK by default? 
In which case, probably not. Better error message maybe? Also see 
https://bugzilla.redhat.com/show_bug.cgi?id=1386103
   
   If we warn the user, it is a feature, not a CVE. If your IT department 
requires you to use an authenticated proxy, you probably won't have a chance to 
change their thinking.
   
   The problem is, that the JDK at least partitially uses aggressive caching of 
the property:
   
   
https://github.com/openjdk/jdk/blob/47b1c51bbd28582d209db07052e553a76acced65/src/java.net.http/share/classes/jdk/internal/net/http/common/Utils.java#L260-L274
   
   So if you want to make that dynamic you have to reflect into an internal 
module.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Reply via email to