[
https://issues.apache.org/jira/browse/NIFI-9861?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17527173#comment-17527173
]
ASF subversion and git services commented on NIFI-9861:
-------------------------------------------------------
Commit aeaec170d58d6765459462110e8846cb5cedf047 in nifi's branch
refs/heads/dependabot/maven/nifi-nar-bundles/nifi-standard-services/nifi-hbase_1_1_2-client-service-bundle/org.apache.hadoop-hadoop-common-3.2.3
from Mark Payne
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=aeaec170d5 ]
NIFI-9861: Removed BlockListClassLoader in favor of AllowListClassLoader
NIFI-9861: Fixed stateless-processor-tests assembly to ensure that all
necessary libraries were included; removed BlockListClassLoader
NIFI-9861: Fixed issue in which we would list .class files as files that we
allow through the AllowListClassLoader but didn't allow them.
This closes #5925.
Signed-off-by: Peter Turcsanyi <[email protected]>
> Stateless ClassLoader isolation does not work on Java 11
> --------------------------------------------------------
>
> Key: NIFI-9861
> URL: https://issues.apache.org/jira/browse/NIFI-9861
> Project: Apache NiFi
> Issue Type: Bug
> Reporter: Peter Turcsanyi
> Assignee: Mark Payne
> Priority: Major
> Fix For: 1.17.0, 1.16.1
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
> Stateless ClassLoader isolation implementation (NIFI-9576) expects that the
> system class loader is an {{URLClassLoader}} instance but it is not true for
> Java 11. Due to this, {{BlockListClassLoader}} gets initialized with an empty
> set of classes and it cannot block anything (there is no isolation, otherwise
> it works on Java 11 as before NIFI-9576)
> [https://github.com/apache/nifi/blob/7fde2bbfd1afdd6037765340eca9fc675542323e/nifi-stateless/nifi-stateless-bootstrap/src/main/java/org/apache/nifi/stateless/bootstrap/StatelessBootstrap.java#L150-L153]
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
