![]() |
|
|
|
|
Issue Type:
|
![Bug]() Bug
|
|
Assignee:
|
Kohsuke Kawaguchi
|
|
Components:
|
script-security |
|
Created:
|
28/Oct/14 9:39 PM
|
|
Description:
|
XMLEscapingTemplateEngine compiles a script with uberClassLoader. When SandboxTransformer runs and generates all sorts of references to Checker.checkedCall(...) and etc., these symbolic references are resolved against uberClassLoader.
If another plugin happens to have groovy-sandbox.jar (like email-ext plugin does), then these calls will resolve against that, which means none of the interceptor will be invoked.
script security plugin needs to set a custom parent classloader so that references to groovy-sandbox will always be resolved to the one visible from script-security.
|
|
Project:
|
Jenkins
|
|
Priority:
|
![Major]() Major
|
|
Reporter:
|
Kohsuke Kawaguchi
|
|
|
|
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
|
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
[email protected].
For more options, visit
https://groups.google.com/d/optout.
