If you would like to secure the confluence webapp to make sure plugins (or other code executed) cannot access unwanted system resources, the following will restrict file system access.
Create the following .java.policy file and place it somewhere:
.java.policy
Make sure the following are java options are defined:
-Djava.security.manager -Djava.security.policy=/path/to/.java.policy
Of course you might be able to get away with less - please edit with any improvements you have!
Labels
