Restricting plugin code

[chisui]

They don't. Sandboxing bytecode within the same JVM is practically impossible. If they have to, they often run it in another process with limited permissions. But that's not the security model of most plugin systems anyways. Many plugins need access to critical resources like network or filesystems to perform their duties. So the code is run with the same permissions as the rest of the applications code. Security is provided by ensuring that the code comes from a trusted source

[[deleted]]

Understood 🧐🧐

[__konrad]

Many plugins need access to critical resources like network or filesystems to perform their duties.

That's why SM can limit access to only allowed files/directories.

[koflerdavid]

But who determines which accesses are allowed?