On 05/20/2016 10:00 AM, Mark Rotteveel wrote:
> On 19-5-2016 23:33, Leyne, Sean wrote:
>>> I think Adriano is taking about the fact that someone from Java code running
>>> inside Firebird would be able to make an embedded connection to any
>>> database running on the same server.

>
> BTW, this risk also exists for normal UDFs.

Definitely yes. Therefore for both UDFs and plugins we have some rules 
(like firebird.conf entry UdfAccess) making it impossible (at least we 
hope it's impossible) to run a code which was not accepted as safe by 
server admin. IMO we need something giving same result for Java - unsafe 
code should not be runnable.


------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to