[JIRA] (JENKINS-53490) org.apache.commons.collections.map.HashedMap rejected due to JEP-200

[o...@nerdnetworks.org (JIRA)]

Title: Message Title

Owen Mehegan created an issue   Jenkins / JENKINS-53490 org.apache.commons.collections.map.HashedMap rejected due to JEP-200 Issue Type: Bug Assignee: Unassigned Components: core Created: 2018-09-10 07:27 Labels: JEP-200 Priority: Minor Reporter: Owen Mehegan After upgrading from 2.89 to 2.121.2.1: 2018-09-09 23:25:30.792+0000 [id=43] WARNING jenkins.security.ClassFilterImpl#notifyRejected: org.apache.commons.collections.map.HashedMap in file:/apps/cache/ejen/war/WEB-INF/lib/commons-collections-3.2.2.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/ No further stack trace though Oleg Nenashev guessed it could be triggered in this case by https://github.com/jenkinsci/artifactory-plugin/blob/master/src/main/java/org/jfrog/hudson/pipeline/steps/MavenDescriptorStep.java#L33 as that is the only code under the jenkinsci GitHub space that might be at risk. But that is just speculation. Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.