coheigea opened a new pull request, #746: URL: https://github.com/apache/ws-wss4j/pull/746
…e is denied Since the Loader hardening (#689), loadInputStream() probes the file system first via Files.exists(). Under a SecurityManager, a caller without FilePermission for the resource name gets an AccessControlException from that probe, so classpath resources such as "actasstore.jks" that loaded fine before now fail outright. Treat a SecurityException from the existence check as "not a file" and continue with the URL and classpath lookups. No privilege is asserted on the caller's behalf: loading an actual file system path still requires the caller to hold the relevant FilePermission, as before #689. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
