You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2021/01/26 13:28:10 UTC

[Bug 65106] ConfigFileLoader cannot properly handle file url running with SecurityManager on openjdk 1.8

https://bz.apache.org/bugzilla/show_bug.cgi?id=65106

Remy Maucherat <re...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #1 from Remy Maucherat <re...@apache.org> ---
Ok, after checking the javadoc, I can see that isAbsolute is a safe call (no
security check) but isFile is not. Wrapping with a try/catch could be
reasonable, however it would also hide the exception when it is legitimate and
useful to have.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org