I'm writing a program in Java 6 that needs to know the location of a properties file. Right now it is configured to do a System.getProperty to get the property file path which was added using the -D flag at runtime. I want to change it so that the property file path is added as an argument for the main method to read. My question is, are there any security implications in either configuration? If so, is one safer than the other? I have tried looking it up but have had trouble with what to search.
Safer to set System property or add arguments in Java
59 Views Asked by user3813942 At
1
There are 1 best solutions below
Related Questions in JAVA
- I need the BIRT.war that is compatible with Java 17 and Tomcat 10
- Creating global Class holder
- No method found for class java.lang.String in Kafka
- Issue edit a jtable with a pictures
- getting error when trying to launch kotlin jar file that use supabase "java.lang.NoClassDefFoundError"
- Does the && (logical AND) operator have a higher precedence than || (logical OR) operator in Java?
- Mixed color rendering in a JTable
- HTTPS configuration in Spring Boot, server returning timeout
- How to use Layout to create textfields which dont increase in size?
- Function for making the code wait in javafx
- How to create beans of the same class for multiple template parameters in Spring
- How could you print a specific String from an array with the values of an array from a double array on the same line, using iteration to print all?
- org.telegram.telegrambots.meta.exceptions.TelegramApiException: Bot token and username can't be empty
- Accessing Secret Variables in Classic Pipelines through Java app in Azure DevOps
- Postgres && statement Error in Mybatis Mapper?
Related Questions in SYSTEM-PROPERTIES
- java.version returning surprising value
- Set JVM flags in an Apache Giraph job
- Gradle Integration Tests are failing because the value of a System.getProperty('zap.port') is null
- could @@SERVERNAME be redefined to return an alias
- How to update java project properties with gradle commandline
- How to set a default value to a string using System Poperties?
- How to get windows domain name in gradle taks?
- Define environment variable for app in Tomcat, outside of deployment
- No value for 'org.quartz.scheduler.instanceId'
- Setting dynamic password from Maven
- What happens when I declare a custom system property in java?
- Java Home not set
- Run a jar file out of java programm with many system properties
- Why need extra step by using http.proxyHost for apache camel http component
- Exception in thread "main" java.lang.Error: Unresolved compilation problems: Syntax error on token "Invalid Character" executing Selenium Java program
Related Questions in CODE-SECURITY
- Is obfuscation necessary for a .NET MAUI C# Android project when the library is compiled to native code in the format .dll.so?
- Does Docker need to be installed ona Windows server that's hosting a GitLab CICD runner?
- Is it possible to hide constant variable from browser dev tools in react js without using .env
- Getting some error while decrypting text in Java
- How can i get code safety on dart-flutter
- protecting stack memory of program
- What's the best way to enhance website security in inspect element?
- How to perform obfuscation of source code and protect source in electron js
- Prevent Headers dump through executable in cocoa osx app
- Save SQL Server Login savely in code (C#)
- C# - Get List of types that a source code file is using or refering to
- yii2 CSRF not working properly
- APPSACAN: Authentication.Credentials.Unprotected
- .NET framework : Are all System.* dlls not intellectual property?
- clang not stuck at #include "/dev/whatever"
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
There is no difference from a security perspective.
However, there is big problem with the following from a security perspective.
Java 6 was EOL'ed in April 2013, and there have been no (public) security patches since then. Using Java 6 in a project where security is a concern is foolhardy, unless you have an Oracle Java support contract, and are diligent about security patches.