From ce6bc62d4807157a58300d8f4872dd7e46653169 Mon Sep 17 00:00:00 2001 From: Thiago Kenji Okada Date: Fri, 3 Feb 2023 21:11:37 +0000 Subject: [PATCH] openjdk19: disable JavaFX by default JavaFX is an optional component of Java since version 11, not used by most applications and also a source of many security issues (i.e.: it bundles both media codecs and WebKit). Also, it is only available in some platforms. So this commit will disable JavaFX by default, that will allow us to reduce the closure size significantly and reduce the attack surface of Java applications for most users. Derivations that needs it can always override the parameter themselves. --- pkgs/development/compilers/openjdk/19.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/development/compilers/openjdk/19.nix b/pkgs/development/compilers/openjdk/19.nix index 57b18065bca9..c79c3d34bd44 100644 --- a/pkgs/development/compilers/openjdk/19.nix +++ b/pkgs/development/compilers/openjdk/19.nix @@ -7,7 +7,7 @@ # TODO(@sternenseemann): gtk3 fails to evaluate in pkgsCross.ghcjs.buildPackages # which should be fixable, this is a no-rebuild workaround for GHC. , headless ? stdenv.targetPlatform.isGhcjs -, enableJavaFX ? openjfx.meta.available, openjfx +, enableJavaFX ? false, openjfx , enableGnome2 ? true, gtk3, gnome_vfs, glib, GConf }: