Review Results

Comment

The change only sets JAVA_HOME and prepends its bin directory to PATH before building. This is a benign build-environment adjustment and does not introduce network access, privilege escalation, persistence, or any packaging/install-time behavior. No security concerns are evident from this hunk.

@@ -97,7 +97,8 @@ build() {
   cd $_jfxdir
 
   # Build with openjdk $_java_build_ver
-  export PATH="/usr/lib/jvm/java-$_java_build_ver-openjdk/bin/:$PATH"
+  export JAVA_HOME="/usr/lib/jvm/java-$_java_build_ver-openjdk"
+  export PATH="$JAVA_HOME/bin:$PATH"
 
   # Workaround for situation where the linker treats whitespace as arguments
   export LDFLAGS="${LDFLAGS//+([[:space:]]|[[:blank:]])/ }"