Merge pull request #134 from metafacture/133-review-permissions-needed

Restrict permissions further
metafacture · Sep 29, 2023 · 0ecd6b0 · 0ecd6b0
2 parents 959a27d + 5bf3a12
commit 0ecd6b0
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/resources/.java.policy_move_to_home_dir b/resources/.java.policy_move_to_home_dir
@@ -50,7 +50,7 @@ grant {
 
         permission java.io.FilePermission "${user.dir}/-", "write, read, delete";
         permission java.io.FilePermission "${java.io.tmpdir}/-", "write, read, delete";
-        permission java.io.FilePermission "${user.home}/-", "read";
+        permission java.io.FilePermission "${user.home}/.m2/-", "read";
 
         // Please adapt these paths to all parent paths of your user home directory
         // Some Fix Code searches a .project file to determine an encoding
@@ -79,7 +79,8 @@ grant {
         permission java.net.SocketPermission "localhost:1024-", "accept, listen, resolve";
         permission java.net.SocketPermission "*", "accept, connect, resolve";
 
-        permission java.net.URLPermission "*", "GET:Accept";
+        permission java.net.URLPermission "http:*", "GET:Accept";
+        permission java.net.URLPermission "https:*", "GET:Accept";
 
         permission java.net.NetPermission "getProxySelector";
 };