JarFileClassLoader allows resources to be loaded from locations outside of the
directory specified in its classpath
-------------------------------------------------------------------------------------------------------------------
Key: AXIS2-4282
URL: https://issues.apache.org/jira/browse/AXIS2-4282
Project: Axis 2.0 (Axis2)
Issue Type: Bug
Components: kernel
Affects Versions: 1.5, nightly
Reporter: Jarek Gawor
Assignee: Jarek Gawor
Fix For: 1.5, nightly
If JarFileClassLoader contains one classpath entry that is a directory, it will
allow resources to be loaded from ANY directory on the file system.
The JarFileClassLoader should of course only allow resources to be loaded from
within the directory specified.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
