Insecure inherited permissions

class SandboxPolicy extends Policy {
  def grantReflection(source: CodeSource): Unit = {
    val granted: PermissionCollection = super.getPermissions(source)
    // VULNERABLE: Insecure inherited permissions
    granted.add(new ReflectPermission("suppressAccessChecks"))
  }

  // Constructing the permission without granting it is the control.
  def describeWithoutGranting(source: CodeSource): Unit = {
    val permission = new ReflectPermission("suppressAccessChecks")
    val listed = new Array[ReflectPermission](1)
    listed(0) = permission
  }
}