On Mon, 18 Nov 2024 16:11:57 GMT, Daniel Fuchs <dfu...@openjdk.org> wrote:
>> Kevin Walls has updated the pull request incrementally with two additional >> commits since the last revision: >> >> - remove missed suppression >> - comment correction > > src/java.management/share/classes/com/sun/jmx/remote/security/MBeanServerAccessController.java > line 76: > >> 74: * >> 75: * <p>An MBean could possibly be a ClassLoader. Users who do not want an >> 76: * MBean which could be a ClassLoader should not permit MBean >> creation.</p> > > Maybe we should just refuse to create an MBean which is a ClassLoader for now > (see further comments below) and handle that part in a dedicated PR. Yes agreed I'm going to update again with checkClassLoader put back. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/22100#discussion_r1846925982