You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Jarek Gawor (JIRA)" <ji...@apache.org> on 2009/03/23 02:54:52 UTC
[jira] Created: (GERONIMO-4600) JarFileClassLoader allows resources
to be loaded from locations outside of the directory specified in its
classpath
JarFileClassLoader allows resources to be loaded from locations outside of the directory specified in its classpath
-------------------------------------------------------------------------------------------------------------------
Key: GERONIMO-4600
URL: https://issues.apache.org/jira/browse/GERONIMO-4600
Project: Geronimo
Issue Type: Bug
Security Level: public (Regular issues)
Components: kernel
Affects Versions: 2.1.4, 2.2
Reporter: Jarek Gawor
Assignee: Jarek Gawor
If JarFileClassLoader contains one classpath entry that is a directory, it will allow resources to be loaded from ANY directory on the file system.
The JarFileClassLoader should of course only allow resources to be loaded from within the directory specified.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (GERONIMO-4600) JarFileClassLoader allows
resources to be loaded from locations outside of the directory specified in
its classpath
Posted by "Jarek Gawor (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-4600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jarek Gawor resolved GERONIMO-4600.
-----------------------------------
Resolution: Fixed
Fix Version/s: 2.2
2.1.4
Ported the fixes and test to branches/2.1.4 (revision 757310).
> JarFileClassLoader allows resources to be loaded from locations outside of the directory specified in its classpath
> -------------------------------------------------------------------------------------------------------------------
>
> Key: GERONIMO-4600
> URL: https://issues.apache.org/jira/browse/GERONIMO-4600
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: kernel
> Affects Versions: 2.1.4, 2.2
> Reporter: Jarek Gawor
> Assignee: Jarek Gawor
> Fix For: 2.1.4, 2.2
>
>
> If JarFileClassLoader contains one classpath entry that is a directory, it will allow resources to be loaded from ANY directory on the file system.
> The JarFileClassLoader should of course only allow resources to be loaded from within the directory specified.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (GERONIMO-4600) JarFileClassLoader allows
resources to be loaded from locations outside of the directory specified in
its classpath
Posted by "Jarek Gawor (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GERONIMO-4600?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12688195#action_12688195 ]
Jarek Gawor commented on GERONIMO-4600:
---------------------------------------
Committed fixes and a test case to trunk (revision 757300) and branches/2.1 (revision 757301) .
> JarFileClassLoader allows resources to be loaded from locations outside of the directory specified in its classpath
> -------------------------------------------------------------------------------------------------------------------
>
> Key: GERONIMO-4600
> URL: https://issues.apache.org/jira/browse/GERONIMO-4600
> Project: Geronimo
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: kernel
> Affects Versions: 2.1.4, 2.2
> Reporter: Jarek Gawor
> Assignee: Jarek Gawor
>
> If JarFileClassLoader contains one classpath entry that is a directory, it will allow resources to be loaded from ANY directory on the file system.
> The JarFileClassLoader should of course only allow resources to be loaded from within the directory specified.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.