[PR] [5.19.x] Restrict URL protocol types loaded by XBeanBrokerFactory (#1910) [activemq]

["cshannon (via GitHub)" <gi...@apache.org>]

cshannon opened a new pull request, #1916:
URL: https://github.com/apache/activemq/pull/1916

   This adds a new system property to control which protocol types are valid for loading resources using the XBeanBrokerFactory. By default only file and classpath resources can be loaded.
   
   The goal of this is to prevent possible future security issues by hardening what is allowed to be loaded by default.
   
   (cherry picked from commit 85fa7bbf17be57107a624d7aa7161008fee7d488)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact

Re: [PR] [5.19.x] Restrict URL protocol types loaded by XBeanBrokerFactory (#1910) [activemq]

["cshannon (via GitHub)" <gi...@apache.org>]

cshannon merged PR #1916:
URL: https://github.com/apache/activemq/pull/1916


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@activemq.apache.org
For additional commands, e-mail: gitbox-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact