diff --git a/pom.xml b/pom.xml index c9c64abc4..5b37afacb 100644 --- a/pom.xml +++ b/pom.xml @@ -23,7 +23,7 @@ 2.17.0 32.0.1-jre 6.4.1 - 1.7.0-SNAPSHOT + 1.7.0 2.17.0 5.9.2 1.8.2 diff --git a/security.md b/security.md index 0c2d9400d..99520397b 100644 --- a/security.md +++ b/security.md @@ -20,6 +20,11 @@ to particular sub-directories. See ManagedFileAccess for details. Note that libraries that this library depends on still access the filesystem directly. Review of the use of these libraries is ongoing. +Dependency Notes: + SQLite: This library uses the SQLite library for database access. SQLite accesses the files directly, + but the file is always touched using ManagedFileAccess to ensure that access is not denied before + being used + Validator: The validator CLI also accesses local files as specified in the command line parameters, and runs in the user context. TODO: we are considering whether to support a command line parameter restricting path access to particular directories.