01-17-2015, 05:09 PM
(01-17-2015, 02:53 PM)DarkStorm Wrote: What about JNI? And Process instances? There are actually a lot of unsafe operations that can be performed without Runtime.exec. I'd recommend coupling this with a SecurityManager.
This is just a POC, I'm planning on expanding the protection further with BCV 2.7.0.