JarFileClassLoader allows resources to be loaded from locations outside of the
directory specified in its classpath
-------------------------------------------------------------------------------------------------------------------
Key: GERONIMO-4600
URL: https://issues.apache.org/jira/browse/GERONIMO-4600
Project: Geronimo
Issue Type: Bug
Security Level: public (Regular issues)
Components: kernel
Affects Versions: 2.1.4, 2.2
Reporter: Jarek Gawor
Assignee: Jarek Gawor
If JarFileClassLoader contains one classpath entry that is a directory, it will
allow resources to be loaded from ANY directory on the file system.
The JarFileClassLoader should of course only allow resources to be loaded from
within the directory specified.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
